Right on Kevin.

Forget Android security.

Today in server - foolishly people assume firewalls, DB cannot be hacked
etc. But this is a fallacy.
In Android, you can put it in sqllite, but that data is persisted somewhere
in disk unencrypted. AFAIK Android does not encrypt anything on flash(unlike
iOS) . So anyone who
roots the device gets full access.



On Mon, Sep 26, 2011 at 11:31 AM, Kevin Chadwick <ma1l1i...@yahoo.co.uk>wrote:

> On Mon, 26 Sep 2011 12:55:40 -0300
> Guilherme Vieira <guira...@gmail.com> wrote:
>
> > The local SQLLite is safe, isn't ?
>
> Only the people concerned can answer this, security is a process not a
> product.
>
> They've put some effort into security but Android is no where near a
> bastion host.
>
> IMHO Android is more secure than a Blackberry but an Android that is
> used for web browsing is less secure than a Blackberry that only
> accesses text email and no attachments (ignoring the enterprise server
> monstrosities).
>
> A server has open ports, how secure is the listening program and
> transport.
>
> Is it encrypted before storing in the database, how secure is the
> algorithm, can the Android device be rooted and if so is the key really
> safe. Are you hoping it will be stolen whilst turned off?
>
>
> What level of security is acceptable to you, or ask a more specific
> question like, how to encrypt data before storing locally via sql?
>
> --
> You received this message because you are subscribed to the Google Groups
> "Android Security Discussions" group.
> To post to this group, send email to
> android-security-discuss@googlegroups.com.
> To unsubscribe from this group, send email to
> android-security-discuss+unsubscr...@googlegroups.com.
> For more options, visit this group at
> http://groups.google.com/group/android-security-discuss?hl=en.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Android Security Discussions" group.
To post to this group, send email to android-security-discuss@googlegroups.com.
To unsubscribe from this group, send email to 
android-security-discuss+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/android-security-discuss?hl=en.

Reply via email to