Here we go: http://developer.android.com/guide/topics/data/data-storage.html#db
"Android provides full support for SQLite <http://www.sqlite.org/> databases. Any databases you create will be accessible by name to any class in the application, but not outside the application." On Mon, Sep 26, 2011 at 14:45, Subbu Srinivasan <ssriniva...@gmail.com>wrote: > Right on Kevin. > > Forget Android security. > > Today in server - foolishly people assume firewalls, DB cannot be hacked > etc. But this is a fallacy. > In Android, you can put it in sqllite, but that data is persisted somewhere > in disk unencrypted. AFAIK Android does not encrypt anything on flash(unlike > iOS) . So anyone who > roots the device gets full access. > > > > > On Mon, Sep 26, 2011 at 11:31 AM, Kevin Chadwick <ma1l1i...@yahoo.co.uk>wrote: > >> On Mon, 26 Sep 2011 12:55:40 -0300 >> Guilherme Vieira <guira...@gmail.com> wrote: >> >> > The local SQLLite is safe, isn't ? >> >> Only the people concerned can answer this, security is a process not a >> product. >> >> They've put some effort into security but Android is no where near a >> bastion host. >> >> IMHO Android is more secure than a Blackberry but an Android that is >> used for web browsing is less secure than a Blackberry that only >> accesses text email and no attachments (ignoring the enterprise server >> monstrosities). >> >> A server has open ports, how secure is the listening program and >> transport. >> >> Is it encrypted before storing in the database, how secure is the >> algorithm, can the Android device be rooted and if so is the key really >> safe. Are you hoping it will be stolen whilst turned off? >> >> >> What level of security is acceptable to you, or ask a more specific >> question like, how to encrypt data before storing locally via sql? >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Android Security Discussions" group. >> To post to this group, send email to >> android-security-discuss@googlegroups.com. >> To unsubscribe from this group, send email to >> android-security-discuss+unsubscr...@googlegroups.com. >> For more options, visit this group at >> http://groups.google.com/group/android-security-discuss?hl=en. >> >> > -- > You received this message because you are subscribed to the Google Groups > "Android Security Discussions" group. > To post to this group, send email to > android-security-discuss@googlegroups.com. > To unsubscribe from this group, send email to > android-security-discuss+unsubscr...@googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/android-security-discuss?hl=en. > -- You received this message because you are subscribed to the Google Groups "Android Security Discussions" group. To post to this group, send email to android-security-discuss@googlegroups.com. To unsubscribe from this group, send email to android-security-discuss+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/android-security-discuss?hl=en.
