[android-security-discuss] Re: NTT Docomo (Japanese mobile career0 send IMEI always in video/audio player.

2011-10-22 Thread Nick
What I am saying that this is a poor way to authenticate a device? The simple app can trigger a http request with another IMEI nos and get access. I don't know how to use IMEI in PlayReady system. # nos means numbers ? -- You received this message because you are subscribed to the Google

Re: [android-security-discuss] Re: NTT Docomo (Japanese mobile career0 send IMEI always in video/audio player.

2011-10-22 Thread Kevin Veroneau
Wouldn't it be more secure if they hashed the imei before placing it into the header? This way a unique hash can be used as an authentication key. Hashes are more difficult to match. Or to make it more difficult, slit the imei into 2, hash both parts, and combine them together in the same

Re: [android-security-discuss] Re: NTT Docomo (Japanese mobile career0 send IMEI always in video/audio player.

2011-10-22 Thread Subbu Srinivasan
No using IMEI alone is an insecure way to authenticate, whether you hash etc. I can start guessing IMEI number using brute force and ultimately get access based on someone's IMEI. On Sat, Oct 22, 2011 at 6:36 AM, Kevin Veroneau kveron...@gmail.com wrote: Wouldn't it be more secure if they

[android-security-discuss] Honeycomb Password on Dell Streak 7

2011-10-22 Thread Giveen
On TabletRoms.com and on XDA we have noticed that when using NVFlash on a Dell Streak 7, sometimes upon reboot we get a screen asking for a password. This sometimes occurs after a complete flash. Could I get an explanation for this or what it is or does? -- You received this message because you

Re: [android-security-discuss] Re: NTT Docomo (Japanese mobile career0 send IMEI always in video/audio player.

2011-10-22 Thread Chris Palmer
On Oct 22, 2011, at 6:36 AM, Kevin Veroneau wrote: Wouldn't it be more secure if they hashed the imei before placing it into the header? This way a unique hash can be used as an authentication key. Hashes are more difficult to match. Or to make it more difficult, slit the imei into 2,

RE: [android-security-discuss] Re: NTT Docomo (Japanese mobile career0 send IMEI always in video/audio player.

2011-10-22 Thread Kevin Veroneau
-- Forwarded message -- From: Kevin Veroneau kveron...@gmail.com Date: Sat, Oct 22, 2011 at 1:27 PM Subject: Re: [android-security-discuss] Re: NTT Docomo (Japanese mobile career0 send IMEI always in video/audio player. To: Chris Palmer snackypa...@gmail.com Salt would be added