-
Notifications
You must be signed in to change notification settings - Fork 1
Security Issues
Maheedhar Mandapati edited this page Nov 3, 2019
·
4 revisions
-
Identify sensitive information kept by your software. Explain how you plan to protect it.
- The User’s Email addresses and Passwords and Usernames are sensitive information kept by our backend. We use the authentication module provided by firebase which encrypts the login and user information that is used by app.
-
Identify possible attack vectors, that is, ways malicious users could try to use your software to escalate their privileges. This includes root access to your server, access to other user’s sensitive information (say via XSS attacks), root access to your database, etc. Explain the protection plan.
- The only way to escalate a user’s privileges is to gain access to the firebase permissions file hosted on firebase. This would be almost impossible as the firebase permission file is encrypted and stored on Google servers and only our backend authors have access to it.
Team and Project Log