[android-developers] Intent with sensitive param

2011-07-22 Thread wasabee18
Hi all, I am handling some sensitive information like password in my app. I am wondering how secure it is to pass password as a parameter to intent. For instance, when I monitor the device with adb.exe, I can see some parameters of the intent sent before the intent is resolved by the OS. How easy

Re: [android-developers] Intent with sensitive param

2011-07-22 Thread Mark Murphy
On Fri, Jul 22, 2011 at 4:02 AM, wasabee18 wasabe...@gmail.com wrote: I am handling some sensitive information like password in my app. I am wondering how secure it is to pass password as a parameter to intent. For instance, when I monitor the device with adb.exe, I can see some parameters of

Re: [android-developers] Intent with sensitive param

2011-07-22 Thread rich friedel
@Mark That is extremely interesting! Just like you, I assumed that intent extras were private. This begs the question... What to do then to keep intent extras private? Better yet, how should we pass sensitive data in an intent extra in such a way that the data remains secure? For example, in

Re: [android-developers] Intent with sensitive param

2011-07-22 Thread Mark Murphy
On Fri, Jul 22, 2011 at 3:22 PM, rich friedel rich.frie...@gmail.com wrote: @Mark That is extremely interesting! Just like you, I assumed that intent extras were private. Yeah, it shocked the heck out of me when somebody mentioned it. This begs the question... What to do then to keep intent