It is the spoof part that concerns me. Anyone else out there have any creative ideas?
Right now I'm considering just checking who is on the top of the activity stack, but that is hokey and not reliable. On Dec 16, 4:30 am, Mark Murphy <[email protected]> wrote: > On Thu, Dec 15, 2011 at 9:54 PM, Kristopher Micinski > > <[email protected]> wrote: > > When you get a bind in your service (your onBind) can you just take > > the intent and get component associated with it? > > > From Intent: > > ComponentName getComponent() > > Retrieve the concrete component associated with the intent. > > That should be the recipient, not the sender. > > The only way I know to find out whoboundto you is if you require > that information in an extra, and that can always be spoofed. The > expectation is that you should not care *who*boundto you, merely > whether they had sufficient permissions to do so. > > -- > Mark Murphy (a Commons > Guy)http://commonsware.com|http://github.com/commonsguyhttp://commonsware.com/blog|http://twitter.com/commonsguy > > _Android Programming Tutorials_ Version 4.1 Available! -- You received this message because you are subscribed to the Google Groups "Android Developers" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/android-developers?hl=en
