Security researchers are raising the alarm about mobile app developers relying on insecure practices that expose Amazon Web Services (AWS) credentials, making the supply chain vulnerable. Malicious ...

Alas, none had done it -- until yesterday, when Amazon announced their AWS SDK for JavaScript in the Browser. Theoretically, it does for their web services, what Dropbox did for theirs.

The SDK supports Amazon’s web identity federation feature (you wouldn’t want to add your AWS credentials in your HTML and JavaScript, after all).

Hundreds of mobile apps have been found to be leaking Amazon Web Services (AWS) credentials. A recent Symantec analysis identified 1,859 publicly available apps, 98% of which are iOS apps, containing ...