“Ok guys, this thing is not very secure. My grandma could hack it while you’re disclosing core finance. I’m not going to allow it. Too risky."
How you hated Jeff with all your bones. Jeff, the security officer, who leaves coffee marks on your desk. Jeff who laughs so loud at his own jokes. Jeff who seems to enjoy his power.
At the same time, even-though you didn’t want to admit it, he had a point. Security was on your mind during the process, but then again you can’t think of everything. You brainstormed about your options:
A: Get the security of the app at a higher level.
Easier said then done. You needed to assemble all the books and blogs on security. Got yourself up to date. You already had “Hacking and Securing iOS Applications: Stealing Data, Hijacking Software, and How to Prevent It”, but this thing was so complicated. Maybe you needed to acquire extra budget and hire an external consultant. But how easy would that be, finding the right person and how would he get it right? Integrating with those dinosaur systems in your organization, this things would take months or years. You needed other options.
B: Hack the security officer
They key here was to find out which drink your Jeff likes. Study Jeff from a little distance like you were Charles Darwin. Jeff likes regular whiskey, so you got him Santis Malt Swiss Highlander Edition Alpstein Single Malt Whiskey 6 YO. Great bate and not suspiciously expensive. Then you need to get sleeping pills and engage for success. It would take a bit of time to get the exact mixture and amount right. Jeff needed to be just awake enough to give you a signature, but not too sleepy or drunk for any type of resistance.
Really, you needed other options than this. There was no way you were getting a signature from him.
If you would only have used the Onegini SDK, this would have had a totally different outcome.