On Fri, Jul 22, 2011 at 4:02 AM, wasabee18 <[email protected]> wrote:
> I am handling some sensitive information like password in my app. I am
> wondering how secure it is to pass password as a parameter to intent.
> For instance, when I monitor the device with adb.exe, I can see some
> parameters of the intent sent before the intent is resolved by the OS.
> How easy is it to monitor/spy/dump the intent resolution process and
> its parameters from:
> - a third party app (say malware) installed on the phone
> - from a PC connected to the phone (using similar tool as adb)

http://commonsware.com/blog/2011/06/30/warning-activity-intent-extras-public.html

-- 
Mark Murphy (a Commons Guy)
http://commonsware.com | http://github.com/commonsguy
http://commonsware.com/blog | http://twitter.com/commonsguy

Warescription: Three Android Books, Plus Updates, One Low Price!

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to