--- title: Trusting clients is probably a security flaw | daily.dev description: The post discusses the heavy restrictions imposed by the McDonald's app to prevent usage on rooted devices and other modified environments. The author... canonical: https://daily.dev/posts/trusting-clients-is-probably-a-security-flaw-cdnfpsypj twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Trusting clients is probably a security flaw | daily.dev og:description: The post discusses the heavy restrictions imposed by the McDonald's app to prevent usage on rooted devices and other modified environments. The author... og:url: https://daily.dev/posts/trusting-clients-is-probably-a-security-flaw-cdnfpsypj og:image: https://api.daily.dev/og/posts/CDnfpSYpj.png og:image:alt: Trusting clients is probably a security flaw og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Trusting clients is probably a security flaw **[Lobsters](https://daily.dev/sources/lobsters)** · 8 min read · 1 upvotes · 0 comments ## Summary The post discusses the heavy restrictions imposed by the McDonald's app to prevent usage on rooted devices and other modified environments. The author highlights the futility of these measures by showing how they can be bypassed easily. The main point is that apps should not overly rely on client-side checks for security as they can easily be manipulated, advocating for better, server-side validation instead. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: --- Tags: [#security](https://daily.dev/tags/security), [#android](https://daily.dev/tags/android) [View this post on daily.dev](https://daily.dev/posts/trusting-clients-is-probably-a-security-flaw-cdnfpsypj) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Trusting clients is probably a security flaw","url":"https://daily.dev/posts/trusting-clients-is-probably-a-security-flaw-cdnfpsypj","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/trusting-clients-is-probably-a-security-flaw-cdnfpsypj"},"datePublished":"2024-10-06T18:06:27.252Z","dateModified":"2024-12-09T12:53:07.534Z","description":"The post discusses the heavy restrictions imposed by the McDonald's app to prevent usage on rooted devices and other modified environments. The author...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e61603014317fda5a7290786937e4cfa?_a=AQAEuiZ","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e61603014317fda5a7290786937e4cfa?_a=AQAEuiZ","isAccessibleForFree":true,"articleSection":"Lobsters","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Lobsters","logo":"https://media.daily.dev/image/upload/s--tl8v_Fku--/f_auto,t_logo/v1698841318/logos/lobste.jpg","url":"https://daily.dev/sources/lobsters"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/trusting-clients-is-probably-a-security-flaw-cdnfpsypj","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,android","timeRequired":"PT8M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Lobsters","item":"https://daily.dev/sources/lobsters"},{"@type":"ListItem","position":3,"name":"Trusting clients is probably a security flaw"}]} ```