I'm logged out 😣 #46
diareuse
announced in
Announcements
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Release as of 13/1/23
App might log you out for 3 reasons:
Due to issues with encryption, some certificates stored on your device (which are being used for encrypting your password for reauthorization purposes) might got corrupted and therefore return invalid data. This was boosted by the fact I wanted to support as many devices as possible, so devices which were unable to encrypt the password stored them in plain text.
Storing passwords in plain text has been therefore removed, devices which do not have the appropriate encryption levels will no longer be able to use the app. We might be able to find together a solution to these certificate issues, however it now tries to be as lenient as possible to allow as many devices as possible without breaking the user trust.
As these encryption steps failed, app got a false sense of decrypted password and used it to send it to the CinemaCity servers. These servers apparently manipulate the password while providing access to the API, therefore they corrupted the password stored on their server as well.
You didn't get banned, not even hacked, we just happened to discover yet another security issue. Moreover if they are able to manipulate with the password, the password is stored in plain text which compromises your security and security of accounts which use the same password.
DO NOT UNDER ANY CIRCUMSTANCES USE THE SAME PASSWORD for CinemaCity as for other websites and apps. Please create a new one.
This shouldn't be all that common, but should be mentioned regardless. The app may malfunction as it's provided without any warranty of functionality.
There's also a possibility that Cineworld decides to restrict access, so I will need to reintroduce their changes to the app again. Would be nice of them to cooperate, but hey…
Beta Was this translation helpful? Give feedback.
All reactions