hey all,

I want to hide some info (encryption keys) in a private area.  I know
there are a lot of threads on the topic and from what i can tell - it
basically comes down to - there's no security :-)  just kidding.

It seems like the data you have in your private area --

/data/data/com.company.product/files

is only accessible to your application, so it would be sufficient to
store anything (like encryption keys for example) in just plain text
files there if you wanted.

the big drawback of doing this though is that a "rooted" phone would
be able to access that area -- therefore, no security.

does "copy protection" solve this problem?  if I "copy protect"
my .apk bundle, I know that that makes it so that it cannot be seen by
"rooted" phones in the Android Market, but what about if the .apk
bundle got out in the wild (i.e. posted on some website, not via
market).  Would a "rooted" phone then be able to grab and install
the .apk file (and ultimately gain access to the app-private area)?
Could someone install the copy protected .apk file in an emulator?

Seems like someone somewhere has to have solved this problem.  Any
help greatly appreciated.

tia.
-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to