It depends on how paranoid you want to be. The IPC channels are secure -- they generally use shared memory, but it is only mapped either between the processes that are communicating or between a single process and the kernel. Often though people like to be extra paranoid about passwords, and now hand them out to other entities (hashed or not) at all. For example, all of the Google services give their applications access to a session ID allowing them to do just the operations they are supposed to and that can be revoked at any time; they don't get to see your password.
On Thu, Jan 22, 2009 at 7:42 AM, Al Sutton <[email protected]> wrote: > > I was spinning some ideas in my brain and started to wonder how secure > the inter-process communication methods are. > > For example; If application A is has data unlocked using a password, and > application B wants to make use of it, should application B pass to > application A the password in cleartext via using a ContentProvider > interface?, should it pass the password as a hash?, should it not use > ContentProvider and use something else? > > Anyone have any thoughts? > > Al. > > -- > ====== > Funky Android Limited is registered in England & Wales with the > company number 6741909. The registered head office is Kemp House, > 152-160 City Road, London, EC1V 2NX, UK. > > The views expressed in this email are those of the author and not > necessarily those of Funky Android Limited, it's associates, or it's > subsidiaries. > > > > > -- Dianne Hackborn Android framework engineer [email protected] Note: please don't send private questions to me, as I don't have time to provide private support. All such questions should be posted on public forums, where I and others can see and answer them. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Android Developers" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/android-developers?hl=en -~----------~----~----~----~------~----~------~--~---
