i've faced 1 problem. want store folder media data here /data/data/com.package.name using context.getexternalfilesdirs. want hide data users. can files /data/data/com.package.name folder. if files hidden, still people rooted devices can access data. need way encrypt or zip folder protect it. how can protect folder? can use zip password? safe?
i think it's not practice encrypt binary files , decrypt them because take lot of time.
there no way prevent user accessing these files. if user wants them or can extract password app , decrypt zip archive.
when passwords on server files can't decrypted, when app downloads password decrypt data user can sniff password. if want store data no 1 should ever access (e.g. passwords) i'm afraid should read security through obscurity
basically when application can decrypt data, advanced user can too.
for normal users (with non-rooted phone) storing files in /data/data/ not accessible. rooted phone there no way stop users getting want.
Comments
Post a Comment