Android :: Password Security - Encryption - Decompile
Feb 2, 2010
I am developing an app that uploads files to an FTP server, and the app will have the ftp user name / password in the code. I'm investigating making the FTP user name and password as secure as possible (including an encrypted value for each in a strings.xml and decrypting in the app when it needs to connect to the FTP server).
My concern is this is not actually secure at all, it seems someone could unzip the .apk, decompile it, view the strings.xml and java code that decrypts it - and thereby obtain the ftp login info.
So my question is.. am I approaching this wrong way? Is there a standard method of ensuring passwords that are hard coded into an app can be secure? (note - in this case this is not a password a user of the app would enter, the FTP password is universal to all that install it so it is included in the app).
View 3 Replies
May 14, 2010
I recently received the OTA update to my Eris and am loving the new interface. However every time I want to unlock my phone I am now required to enter an 8 digit password as opposed to the screen pattern I was using prior. From messing around I realized that this is due to the fact that my company's exchange account requires SSL encryption and therefore requires the password be entered to unlock the phone. My question is whether there is a way to keep my email but only require the screen pattern to unlock my phone? I know iPhone users at my company that are still fine entering their 4 digit code so have to assume we should be able to do the same.
View 7 Replies
View Related
Mar 5, 2014
I set a password to encrypt the disk on my N4. When I reboot the phone it ask me a password with a standard keyboard.
My question is : can we change this keyboard for another one or at least its orientation?
the cause is that my screen is broken on the lower right coin and it block the "Done" button. annoying...
The TWRP keyboard to decrypt the disk should be fine (its "done" button is larger enough)
View 1 Replies
View Related
Sep 1, 2012
I am running Android 4.1.1 on a Samsung GT-I9250M Galaxy Nexus.
Third, I have two carriers: a Straight Talk Unlimited Prepaid SIM (United States GSM/HSDPA) & a Claro Prepaid SIM (Honduras, GSM)
1) I installed the Straight Talk SIM in the phone.
2) I installed the battery in the phone.
3) I powered on the phone.
4) I enabled full disk encryption, choosing an easy-to-memorize password.
... over two weeks, i successfully decrypt the phone on boot 30 - 40 times with the password ...
... then i travel to honduras and purchase a Claro SIM ...
5) I powered off the phone.
6) I installed the Claro SIM in the phone.
7) When prompted to "type password to decrypt storage" I enter the correct password.
8) I am prompted to "try again."
9) I enter the correct password.
10) I m prompted to "try again."
11) I powered off the phone.
12) I installed the Straight Talk SIM in the phone.
13) When prompted to "type password to decrypt storage" I enter the correct password.
14) I am prompted to "try again."
15) I enter the correct password.
16) I am prompted to "try again"
I have tried booting with the Straight Talk SIM, the Claro SIM, and with no SIM. I have tried removing the battery. I am able to boot in Recovery Mode. However, performing a factory reset is not a viable option for me. I need to regain access to my phone. Why would the encryption key be altered by the SIM change? And wouldn't reinstalling the Straight Talk SIM be enough?
View 1 Replies
View Related
Nov 27, 2010
On my Blackberry I could unlock my phone by typing in a number password of my choosing. Is there an app for that on Android? I've been looking without any luck.
View 7 Replies
View Related
Apr 22, 2010
Here is what I am trying to figure out:
1) My application is going to have an optional password activity that will be called when the application is first opened.
My questions for this are a) If I store the password via android preference or SQLite database, how can I ensure security and privacy for the password, and b) how should password recovery be handled?
Regarding b) from above, I have thought about requiring an email address when the password feature is enabled, and also a password hint question for use when requesting password recovery. Upon successfully answering the hint question, the password is then emailed to the email address that was submitted. I am not completely confident in the security and privacy of the email method, especially if the email is sent when the user is connected to an open, public wireless network.
2) My application will be using an SQLite database, which will be stored on the SD card if the user has one. Regardless of whether it is stored on the phone or the SD card, what options do I have for data encryption, and how does that affect the application performance?
View 3 Replies
View Related
Nov 12, 2010
I'm looking for an app that I can use to password files/apps. For example...my stock Gallery app. I have pictures in there of family, ect that I wouldn't want people to get in case my phone was lost/stolen. Is there such an app?
View 2 Replies
View Related
Jan 11, 2014
I need to put a good password keeper on my phone. There are many, of course. I want to get one that also has a desktop version. My question is when syncing, what do you feel is more secure? Syncing to a cloud such as Dropbox or straight WiFi sync between my phone and pc?
View 2 Replies
View Related
Sep 23, 2010
I upgraded to 2.2 yesterday and download was quick (<5 min) and install was equally quick.
When it rebooted to the new system it required me to establish a security code that comes on when you unlock the phone. I want to disable this function- but in the setting menu the choice to disable is there- but not able to be selected to be modified? Am I just missing something?
BTW: seems like a smart unlock as it only ask for your password if it has slept for a while (which makes me believe there is a setting somewhere that modulates the length of time after sleep that this is activated).
View 5 Replies
View Related
Apr 22, 2012
can't get past security password to connect to wifi at hotel. I am for sure typing the right password. Do I have to turn a phone setting off
View 3 Replies
View Related
Sep 19, 2010
Is it possible to password protect the recovery image; where we flash our roms ect...?
I have password protected the device to stop the phone being used while it is on, but it's really pointless when someone can turn the phone off and just reflash the device.
Granted, they could do that anyway even if i had an offical rom without the recovery image, but it would still be a nice feature if it's possible.
View 1 Replies
View Related
Aug 12, 2010
Yesterday i added a security pattern where you have to fill in the pattern when the phone like starts. I took the wrong pattern and have to login with google stuff now. I did login and all stuff, but i get error saying wrong password or username. I checked on google.com that it was correct and it is. Now i do not have Internet checked on before it went to locking so i dunno if its the reason that i do not have the internet connection on it.
View 2 Replies
View Related
Feb 6, 2010
On my previous phone it had a "full lock" feature on it that when a text message or phone call came in it would show all stars on the screen and require my password before you could answer the call or view the text message does the hero have that option or is there an app I can download?
I tried the pattern lock thing it has but if a call comes through or a text message comes through it still allows you to answer and/or view the message without entering the lock pattern..
View 4 Replies
View Related
Mar 3, 2010
I have had this same problem happen twice to me on 2 different phones on 2 different Verizon accounts!
The password screen locks and when it asks for the user name and password it states invalid user name / password!
Is this a known problem since when I called and talked to both Verizon and HTC the only thing they could tell me was to do a hard reset and they weren't aware of this problem?
View 1 Replies
View Related
Jun 6, 2012
How to decompile APK in android?
View 4 Replies
View Related
Feb 20, 2014
I've installed the android sdk, java, and all the other fancy things I was supposed to, but cannot get Android Multitool to decompile any apk's.
This is the error log it throws out: The system cannot find the path specified. 'apktool' is not recognized as an internal or external command, operable program or batch file. The system cannot find the file specified.
View 4 Replies
View Related
Mar 13, 2012
I'm trying to decompile a few apks for modifying the dialer on an ICS rom. When I go to decompile I get an empty folder and this error:
I: Baksmaling...
Exception in thread "main" java.lang.RuntimeException: bad magic value: 64 65 78 0a 30 33 36 00
at org.jf.dexlib.DexFile.<init>(DexFile.java:377)
at org.jf.dexlib.DexFile.<init>(DexFile.java:274)
at brut.androlib.src.SmaliDecoder.decode(SmaliDecoder .java:44)
at brut.androlib.src.SmaliDecoder.decode(SmaliDecoder .java:33)
at brut.androlib.Androlib.decodeSourcesSmali(Androlib .java:68)
at brut.androlib.ApkDecoder.decode(ApkDecoder.java:85 )
at brut.apktool.Main.cmdDecode(Main.java:128)
at brut.apktool.Main.main(Main.java:65)
All I would like to do is edit a few xml files to change the color on text. Could I just rename the apk to .zip and extract the files to be edited?
View 5 Replies
View Related
Jul 8, 2013
I have been trying to use APK Tool for HOURS and I keep getting this error:
I: Baksmaling...
I: Loading resource table...
Exception in thread "main" java.lang.ClassCastException: brut.androlib.res.data.
value.ResFileValue cannot be cast to brut.androlib.res.data.value.ResScalarValue
at brut.androlib.res.decoder.ARSCDecoder.readComplexE ntry(ARSCDecoder.ja[code].....
I am trying to edit BlockLauncher Pro APK. Is there any other way to decompile apks?
View 7 Replies
View Related
Apr 18, 2013
how to decompile and compile jar files using cmd or other...
View 2 Replies
View Related
Nov 22, 2011
Using APK Manager im trying to decompile some APKs from ICS, though always run into errors (Unlike GB APKs which I have no problem with)
Code:
|22/11/2011 -- 20:21:58.42|
--------------------------------------------------------------------------
java version "1.7.0_01"
Java(TM) SE Runtime Environment (build 1.7.0_01-b08)
Java HotSpot(TM) 64-Bit Server VM (build 21.1-b02, mixed mode)
--------------------------------------------------------------------------
|22/11/2011 -- 20:22:29.68|
--------------------------------------------------------------------------
java version "1.7.0_01"
Java(TM) SE Runtime Environment (build 1.7.0_01-b08)
[URL]
Ive heard using the newer version of APK Manager is supposed to fix things, though cant find a newer one. The only file I found on XDA was a Jar file, and didnt explain what / how to replace with current APK Manager.
View 9 Replies
View Related
Aug 19, 2012
I need to edit my phone "service.jar' file. So i need to know how to compile and decompile ".jar" files. I think before the edit ".jar" files i need to decompile it like android apps. Are there any too for it like apktool? I try to do it with apktool but not success.
View 4 Replies
View Related
May 20, 2014
Is it possible to decompile an apk and change some function? For example: A game give you always 50 gems for an exercise. Is it possible to change the function so you will get 100 gems?
View 1 Replies
View Related
Feb 20, 2014
I was trying to decompile, modify and then recompile my SystemUI.APK to put THIS mod into it. I am using THIS TOOL.... Now I can successfully decompile my SystemUI.APK, but when I go to recompile it, nothing happens and there is nothing in the recompiled folder.
BTW I have a Sprint GS4 running a custom ROM (TouchWiz based) on Android 4.3.
View 1 Replies
View Related
Oct 10, 2013
It Possible? I Decompile App and i want add my class to this app. How to do this? I search but can'y find any guide. I Use Apktool.
View 5 Replies
View Related
May 18, 2013
I know how to decompile, recompile and sign apk but how to decompile smali file for editing....
View 9 Replies
View Related
Dec 21, 2013
how to Decompile/Recompile System apps from MTK phones? I'm using apktool 1.5.2.I can decompile like "SystemUI.apk"But I can't recompile. Even I didn't edit anything yet.Specially those who have MTK phones.
View 3 Replies
View Related
Feb 16, 2012
I'm trying desperately to edit some files inside SystemUI.apk and framework-res.apk but I'm having some troubles...
I wanted to post in the specific thread of the program : [URL] but I'm not allowed to, because it's my first post here.
First I used only apktool, I managed to decompile my 2 files with no problems, I replaced a few *.png files and tried to recompile it but I'm getting errors... (I only manage to recompile the files if I don't edit a thing)
Then I tried APK Multi Tool, I achieved to decompile my 2 files (with the option 9 in the program), but I can't recompile them after editing my files. So I decided to make a test, I tried to decompile and recompile (I hit 9 then 11 in the choice case) them WITHOUT changing a thing and I get errors anyway. If I use the choice 1 (only extract the apk), do my editing and then zip the project (with the choice 3), directories are wrong inside the new *.apk, I get "projectsSystemUI.apk(res or smali, etc...)" so the *.apk result is not usable
Here is the log file when I try to recompile WITHOUT changes :
Code:
I: Baksmaling...
I: Loading resource table...
I: Loaded.
[Code]....
View 9 Replies
View Related
Apr 8, 2010
I'm look for an app that will encrypt my SD card. I don't want to worry about losing my phone and the finder having access to the information on my SD card. I know it'll slow the phone down.
'Gallery Private' in the market looks like it may do this. Does anyone have experience with this app? Does it only encrypt pictures and folders?
'B-Folders+sync' looks like it only does contacts and notes. I may need a combination of them both.
Makes me sort of wish there was a BitLocker-esque app available.
View 4 Replies
View Related
Jan 29, 2013
how to change the default appdata storage...
datadatacom.google.android.apps.currents to sdcardAndroiddatacom.google.android.apps.curren ts coz currents stores both cache and data to internal mem...which takes a whopping 100-150mb itself.
can i change some vaules to make it store in the sdcard instead.....
View 7 Replies
View Related
Jan 7, 2010
I'm trying to use BouncyCastle with android to implement ECDH and EL Gamal. I've added the bouncycastle jar file (bcprov-jdk16-144.jar) and written some code that works with my computers jvm however when I try and port it to my android application it throws: java.security.NoSuchAlgorithmException: KeyPairGenerator ECDH What am I doing wrong?
View 2 Replies
View Related
