Sunday, August 5, 2012

Re: [android-developers] Lost Password of Keystore

> Send yourself an e-mail with the keystore attached and include your password,

Thats crazy. Your mail message may pass through several untrusted routers so a lot of people may have access to both, the keystore and the unlock password.

Sounds like you suffer from paranoia. If you're worried about the NSA intercepting your keystore, then yes. Don't put it in the cloud. On the other hand, the NSA and their black helicopters could just hover over your house and beam it up, Scotty style. 

Using GMail with https is pretty secure.

Looks like you suffer from illogical thinking. Assumption 'I am noone important, why anyone would even bother to hack my mail' is plain silly. It is as silly as buying high end secure vault and then keep its key under the wiper. And no, gmail is NOT secure more than other mailboxes, nor https makes any difference here. Your account may simply be hacked just because someone managed to do that. And why yours? Why not. Randomly chosen victim, and then you doomed because of your unwise assumptions. "oh, and he keeps the keystore and password? nice. and credit cards numbers, PIN and CC too. Good boy..." - imagine the rest...

Keeping multiple copies of your keystore is one thing, and you could keep it in gmail as long as you keep the password elsewhere. Not see any problem to store it in many password wallet apps (even on your phone, with i.e. OI Safe or anything). Disaster recovery planning is crucial. If you did it wrong, then you end with no recovery. Simple as that.

Regards,
Marcin Orlowski

Tray Agenda - keep you daily schedule handy...
Date In Tray - current date at glance...
WebnetMobile on Facebook, Google+ and Twitter
-John Coryat

--
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

--
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

No comments:

Post a Comment