Fixing the architecture is not particularly realistic IMO except
as a *possible* solution because Google would unlikely accept
code just like that.  IMHO, such an effort requires Google support
from the beginning since this is *core* Android.

Anders

juanfe wrote:
Hi Luis,

Take a look at these threads:

http://www.mail-archive.com/[email protected]/msg00193.html

http://www.mail-archive.com/[email protected]/msg00192.html

Anyone who can come up with a good way of addressing this security
challenge operationally will be doing a lot of Android users a
significant favor. The Android team believes this is unnecessary to
address, so it's up to the community to come up with some way of
avoiding the impact of this (IMHO flawed) architecture.

Regards,

Juan Felipe

On Aug 2, 2:08 pm, Luis <[email protected]> wrote:
Hi all,

I am looking to contribute to Android security and at the same time
write my thesis.
I have experience in C++ programming as well as other languages; and
also in coporate security management.

Any ideas of topics where I could help?

Luis


Reply via email to