Assuming new devices are fixed moving forward, I'm curious about
devices remaining in market with this problem.  Will an OTA update to
Gingerbread fix the ANDROID_ID for clients with the default one?  I'm
guessing ANDROID_ID persists across os updates and that only hard
reset will spawn a new one, after a device has updated to a version of
the os/firmware that will correctly set it?  My assumption, correct me
if I'm wrong:  In order to cure this insecure android id, a client
must both update and reset?

-Ben

On Aug 21, 6:28 am, OldSkoolMark <[email protected]> wrote:
> Perhaps this has already been answered in the originating thread, but
> I couldn't find it. The LVL docs suggest using additional features
> besides ANDROID_ID, and the question was which? Dianne Hackborne had
> issues with using the IMEI. Is using the MAC address a better option?
>
> On Aug 20, 12:04 pm, Trevor Johns <[email protected]> wrote:
>
>
>
> > Hi everyone,
> > Just to follow up a bit here, the reason we believe this is happening is
> > because ro.serialno isn't set on these devices. (Note that the ro.*
> > properties currently aren't required by the CDD/CTS.) Unfortunately, it
> > seems that we're using ro.serialno as the seed for the PRNG when generating
> > ANDROID_ID.
>
> > See: 
> > frameworks/base/packages/SettingsProvider/src/com/android/providers/setting 
> > s/SettingsProvider.java:416
>
> >http://www.google.com/codesearch/p?hl=en#uX1GffpyOZk/packages/Setting...
>
> > I've gone ahead and opened up a bug here for tracking purposes:
>
> >http://code.google.com/p/android/issues/detail?id=10639
>
> > (We suspect that the Droid 2 isn't the only phone affected by this, likely
> > just the most noticeable instance.)
>
> > We have a fix for this checked into our internal Git repo, so once that
> > change propagates to vendors this shouldn't be an issue on future devices.
> > For existing devices though, if you absolutely depend on the uniqueness of
> > ANDROID_ID, you'll unfortunately need to rely on some other identifier
> > (IMEI, WiFi MAC, etc.).
>
> > --
> > Trevor Johns
>
> > On Fri, Aug 20, 2010 at 10:46 AM, suzanne.alexandra <
>
> > [email protected]> wrote:
> > > Andrew,
> > > I don't know that this is reported in any public bug system. I've
> > > reported it within a Motorola bug system.
>
> > > - Suzanne
>
> > > On Aug 20, 12:33 am, "Maps.Huge.Info (Maps API Guru)"
> > > <[email protected]> wrote:
> > > > > John, have you had any complaints yet about conflicts from duplicate
> > > > > unique ids?
>
> > > > I handled it in code.
>
> > > > -John Coryat
>
> > > --
> > > You received this message because you are subscribed to the Google
> > > Groups "Android Developers" group.
> > > To post to this group, send email to [email protected]
> > > To unsubscribe from this group, send email to
> > > [email protected]<android-developers%2Bunsubs
> > >  [email protected]>
> > > For more options, visit this group at
> > >http://groups.google.com/group/android-developers?hl=en

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to