Skip to content

Instantly share code, notes, and snippets.

@maretekent

maretekent/Notes on security Android

Created March 31, 2018 21:32
Show Gist options
  • Save maretekent/9e5cc82b222001f874de4d201e8cc56d to your computer and use it in GitHub Desktop.
Save maretekent/9e5cc82b222001f874de4d201e8cc56d to your computer and use it in GitHub Desktop.
Download ZIP
Android Security
Raw
Notes on security Android
Excessive Logging:
private void logD(String message) {
if (BuildConfig.DEBUG)
Log.d(this.getLocalClassName(), message);
}
Execessive logging of sensitive security data should be avoided in prod env.
@maretekent
Copy link
Author

insecure Local storage:
save reg data on the server and check free period of the application usage each time the user enter it. obfuscate android code to provide protection against reverse enginerring

@maretekent
Copy link
Author

Sensitive data in storage:
sensitive data should be encrypted and only store data that is required encrypted.
don't assume data and properties of the app

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment