M
M
mitaichik2016-08-25 22:21:33
Android
mitaichik, 2016-08-25 22:21:33

Should I be concerned about data security in memory?

Hello!
I have some private data stored in the app. I encrypt them, use the Android KeyStore, etc. But is it worth worrying about their security when they are decrypted and in memory? Is it safe to store them in savedInstanceState, pass them to Intent?
Thanks in advance!

Answer the question

In order to leave comments, you need to log in

2 answer(s)
X
xSkyFoXx, 2016-08-27
@xSkyFoXx

Another application cannot access your application's memory space. The operating system is responsible for this and gives a number of guarantees for this, providing a high level of isolation. In cases with Android, it is still more serious - the isolation of applications from each other is provided both at the level of the operating system and at the level of a JVM-like virtual machine.
If you are transmitting something on the internet with encryption then your level of protection is the level of protection of the encryption protocol you are using.
As you can see, neither in the first nor in the second cases, you can not influence anything. Therefore, just use it without remorse :)

Z
z0rgoyok, 2016-08-28
@z0rgoyok

You can also freeze the memory chip and remove the data. If you want to protect yourself from this - it is necessary.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question