android - Can data stored in iPhone App be taken from sqlite or Preferences list file? -
I plan to store a password in my original app (Android and iPhone). Should I archive it after encrypting it? Or can I store it without any encryption? Are they really safe?
A jailbroken iPhone will give a user access to the documents folder of the application. So, yes, this is insecure.
In addition, if you enter the password inside the code, then you still get weak, because someone can reduce the program and get the key. The suggestion I give is a proxy. For example, we have an app that connects to the Facebook API on the phone. However, we do not want to store our Facebook API Private Key on the phone, because then any user who can hack our Facebook application with reverse engineers!
Instead, we store the Facebook private key (secure) on the proxy server when the device needs to interact with Facebook, it connects to the proxy, to log in Proxy asks, and then gives a session key in the tool to use the proxy directly with Facebook.
Of course, it is still compatible - but you will not be able to lose your private key in this process, and instead, what your users can do, you do the same things in your proxy server API .
Do you have a little more information about what you are trying to do?
Comments
Post a Comment