So some guys at my brother's college made a sports live score app, which charges 1$ for getting score. He decompiles it, and what we see is bewildering, it is not obfuscated and the link to the json values are hardcoded in the app and the whole login process is just a sham. Seriously, WTF, were the guys thinking!