Re: [android-developers] Re: How secure are SharedPreferences on rooted devices?

2011-11-24 Thread Ricardo Amaral
On Wednesday, November 23, 2011 6:26:09 PM UTC, Mark Murphy (a Commons Guy) wrote: On Wed, Nov 23, 2011 at 12:51 PM, Ricardo Amaral mas...@ricardoamaral.net wrote: I'm a little confused... If SharedPreferences are not safe for this, how are apps handling validation if they don't use

Re: [android-developers] Re: How secure are SharedPreferences on rooted devices?

2011-11-24 Thread Ricardo Amaral
Thanks. This is very basic, so if you decide to use it, you may want to improve/tweak it. At least you need to decide how you manage coupons: by device (how do you identify devices?), user (google account, email), etc. I haven't yet installed anything of that but one way would be to have

Re: [android-developers] Re: How secure are SharedPreferences on rooted devices?

2011-11-24 Thread Nikolay Elenkov
On Thu, Nov 24, 2011 at 8:51 PM, Ricardo Amaral mas...@ricardoamaral.net wrote: Thanks. This is very basic, so if you decide to use it, you may want to improve/tweak it. At least you need to decide how you manage coupons:  by device (how do you identify devices?), user (google account, email),

Re: [android-developers] Re: How secure are SharedPreferences on rooted devices?

2011-11-24 Thread lbendlin
exactly. Rather than thinking about the technicalities first, approach the issue from the other side. What is your user population like? Average users that never change phones? Geeks that flash a new ROM every week? Silent majority versus vocal few trolls? Once you have decided how you want to

Re: [android-developers] Re: How secure are SharedPreferences on rooted devices?

2011-11-24 Thread Ricardo Amaral
I don't think those issues are really that relevant. For my situation at least. This is only to give out some free copies to some persons, not to use as a full validation system for every paying user... -- You received this message because you are subscribed to the Google Groups Android

Re: [android-developers] Re: How secure are SharedPreferences on rooted devices?

2011-11-24 Thread Nikolay Elenkov
On Thu, Nov 24, 2011 at 11:37 PM, Ricardo Amaral mas...@ricardoamaral.net wrote: I don't think those issues are really that relevant. For my situation at least. It's your app, so you should know best... But, This is only to give out some free copies to some persons, not to use as a full

[android-developers] Re: How secure are SharedPreferences on rooted devices?

2011-11-24 Thread Kevin TeslaCoil Software
I'm just trying to understand how secure is SharedPreferences and what alternatives are there, that's all. On a rooted device SharedPreferences absolutely can be tampered with. Same with any on-device storage. However this doesn't mean you can't use them. 1) Obfuscation. This is how Google

Re: [android-developers] Re: How secure are SharedPreferences on rooted devices?

2011-11-24 Thread Ricardo Amaral
On Thursday, November 24, 2011 2:57:47 PM UTC, Nikolay Elenkov wrote: On Thu, Nov 24, 2011 at 11:37 PM, Ricardo Amaral mas...@ricardoamaral.net wrote: I don't think those issues are really that relevant. For my situation at least. It's your app, so you should know best... But, This

[android-developers] Re: How secure are SharedPreferences on rooted devices?

2011-11-24 Thread Ricardo Amaral
On Thursday, November 24, 2011 5:36:20 PM UTC, Kevin TeslaCoil Software wrote: I'm just trying to understand how secure is SharedPreferences and what alternatives are there, that's all. On a rooted device SharedPreferences absolutely can be tampered with. Same with any on-device

Re: [android-developers] Re: How secure are SharedPreferences on rooted devices?

2011-11-24 Thread Kostya Vasilyev
If what you want is to be able to give out free copies to some users, implement another unlocker, that is similar to the paid premium unlocker you're planning for Market, but is free. Encrypting preference data has nothing to do with LVL per se, and does not require that the app is paid or free.

[android-developers] Re: How secure are SharedPreferences on rooted devices?

2011-11-23 Thread Ricardo Amaral
I'm a little confused... If SharedPreferences are not safe for this, how are apps handling validation if they don't use online validation? I'm sure there are a couple who don't use online validation but have some sort of validation and they probably use SharedPreferences to control the app

Re: [android-developers] Re: How secure are SharedPreferences on rooted devices?

2011-11-23 Thread Mark Murphy
On Wed, Nov 23, 2011 at 12:51 PM, Ricardo Amaral mas...@ricardoamaral.net wrote: I'm a little confused... If SharedPreferences are not safe for this, how are apps handling validation if they don't use online validation? I'm sure there are a couple who don't use online validation but have some

Re: [android-developers] Re: How secure are SharedPreferences on rooted devices?

2011-11-23 Thread Nikolay Elenkov
On Thu, Nov 24, 2011 at 2:51 AM, Ricardo Amaral mas...@ricardoamaral.net wrote: Online validation is something I really wanted to avoid. I know that most people have an internet connection always on, but when they don't, I really don't want to downgrade my app or prevent them from using it.