Security Issues

Jump to bottom

zhiquan xie edited this page Nov 1, 2021 · 12 revisions

Sensitive data preserved by our app

Windows Serivice will read the mac address and upload it to the firebase. Other than that only the email address and password will be preserved for validation.

Possible attack vectors

We are using firebase which is from Google. Under this situation our server are proctected by Google and it is definitely better than any measures that we are able to take to defend ourselves from hackers.
If webpage not closed or web service not signed out hackers can use that to access sensitive data such as email and password.
The windows Service should be fine because it only receive data from firebase server except the login sessios(which send email and password to the server)