Saturday, June 18, 2011

[android-developers] Re: Android - SQLLite

Actually, people have worked hard at making systems where even if the
attacker has a logic analyzer hooked up to the CPU and/or memory bus,
he cannot break the encryption (in a practical amount of time).
However, that usually requires that the key not be stored on the
device anywhere, it comes from the user each time access is needed,
and is wiped from RAM immediately after use.

Also, though I have seen such systems, I have not seen it for Android.
The architecture does not make that easy.

On Jun 12, 11:49 pm, Zsolt Vasvari <zvasv...@gmail.com> wrote:
> > - I am creating database in default way hence it will be created in my
> > application private storage and other applications will not get access to
> > it. Still I the user login as root user he would right? Anyways to prevent
> > this?
>
> No, of course, not.  Given access to the hardware, no software
> solution is secure.

--
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

No comments:

Post a Comment