[android-security-discuss] Re: How to create canonicalized XML for XML digital signature

2012-03-02 Thread Pankaj
Thanks for the reply. I had resolved the issue. Initially I am not adding xmlns value in timestamp. On Tuesday, 28 February 2012 12:08:23 UTC+5:30, Pankaj wrote: I want to consume WCF web-service which uses X.509 certificate for mutual authentication. I had imported certificates using

[android-security-discuss] Question on controlling access to a specific user developed library

2012-03-02 Thread Harsha Joshi
hi i am developing a native library. Proving a JNI wrapper and then a java API library on top of it for app developers. However i want to control the permissions as to who has to access it. Basically i want to verify that only specific applications are able to load this library. How to achieve

Re: [android-security-discuss] Variable Inspection

2012-03-02 Thread Jon Larimer
It's simply not possible to prevent applications from inspecting variables inside of a library that's loaded into their own process. Since there's no default SecurityManager, an app could use reflection to modify the protection flags on a class, method, or field (i.e., change a private field to

Re: [android-security-discuss] Variable Inspection

2012-03-02 Thread Oleg Gryb
Good point, Jon. I could also add that AccountManager can be used to implement a custom service. It can be easier for ordinary users to install - they would just need to create a new account type with parameters. Account implementention would contain all services running as a separate process. Yet

Re: [android-security-discuss] Variable Inspection

2012-03-02 Thread Nick Kralevich
100% agree with Jon. It's because of these fundamental problems that we removed support for the SecurityManager in Android. If you attempt to set a security manager in Android, it will throw a SecurityException.

[android-security-discuss] Re: Question on controlling access to a specific user developed library

2012-03-02 Thread Chris Stratton
On Friday, March 2, 2012 12:52:27 AM UTC-5, Harsha Joshi wrote: hi i am developing a native library. Proving a JNI wrapper and then a java API library on top of it for app developers. However i want to control the permissions as to who has to access it. Basically i want to verify that