PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Ensuring Mobile Application Security with Expo

hackerone.com | blog | #appsec | #network-security | #mobile-security | #authentication | #react-native | #expo | #secure-storage | #certificate-pinning
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A practical guide to securing React Native apps built with Expo: using expo-secure-store for encrypted token storage, enforcing HTTPS with certificate pinning, and hardening auth flows.
Published
Collected

Related coverage

blog · netspi.com
Smartphone Pattern Unlock Sucks
Pattern unlock's security is dubious since shoulder surfers can replicate it. The author proposes a wireless dongle exchanging cryptographic signatures with the phone as a second factor.
research · slcyber.io
Expanding the Attack Surface: React Native Android Applications
Specific attack vectors in React Native Android applications: bundle loading via loadBundleFromURL and deep link handling with the Linking API.
blog · hackerone.com
Certificate Pinning: Enhancing Client-Side Security
Explains certificate pinning in clients: basic public-key pinning versus more flexible certificate chain pinning, and how each defends against MITM attacks and compromised certificate authorities.
blog · portswigger.net
Heading to San Francisco? Meet PortSwigger at OWASP Global AppSec USA 2026
Join us at booth G14 on 5–6 November at the Hyatt Regency San Francisco. We’re a Gold sponsor, with live Burp AT demos, conversations about your AppSec programme, and something new to share. OWASP is
blog · blog.trailofbits.com
SAML: A fractal of bad design
Trail of Bits traces SAML's committee-driven origins and argues the 2002 XML-based SSO protocol should finally be retired: cursed XML signature validation keeps producing vulnerabilities, and OIDC is the way forward.
blog · blog.quarkslab.com
Overview of Passive Optical Networks (PONs) Security
Passive Optical Networks (PONs) connect end-users to infrastructure using optical fibre in the last kilometre (Fibre-to-the-x). This article provides a technical overview of the security features in ITU-T specifications: Gigabit-capable PON (GPON), 10-Gigabit-capable PON (XG-PON), 10-Gigabit-capable Symmetric PON (XGS-PON), Next-generation PON 2 (NG-PON2), and 50-Gigabit-capable PON (50G-PON). The analysis covers authentication schemes, key derivation, encryption methods, and associated security implications.
Back