Collaborate Disseminate
Documents such as driving license, financial statements etc. with a lot of PII, how big is the risk of storing such type of documents on the shared external storage on android?
Assumptions:
Android device is encrypted but the individual f… Continue reading What are the security risks of storing sensitive documents on your android devices’s external storage?
Samsung phone
Android 12
One ui core 4.1
Whenever I reboot my phone, the camera indicator shows up in the status bar, there’s no camera related app open in the foreground and I have not enabled background permission to any app (except fo… Continue reading com.sec.android.app.camerasaver is using the camera in the background on android 12 [migrated]
Will it be possible for an app to read data in the background if it has media access permissions or even full storage access permission?
Assumptions:
Android 11 and above
Media and file storage permission (the highest permission)
App is fr… Continue reading Can apps access whatever data they want if they have the media or files permissions [closed]
Is it useful to encrypt files using file encryption apps like edslite, cryptomator and boxcryptor or is the device encryption enough on Android 11?
Continue reading is it useful to encrypt files on Android 11 using something like cryptomator
If the password is hashed and then sent to the server where the hash is compared to the stored hash, this basically means that if someone had that hash they can still log in by sending the hash in the request, the password is just useless … Continue reading What’s the point of hashing a password and then sending it to the server?
In the Bitwarden Security Whitepaper Page 9-10 (User Login | User Authentication | Access to User Vault Data section), it’s written that the master password is encrypted locally and then stored on the server and the encryption key is hashe… Continue reading How does Bitwarden Authenticate and decrypt the vault [closed]
I read the audit docs on GoCryptFS website (https://nuetzlich.net/gocryptfs/threat_model/). There dragon has full information about the read write done in the gcfs partition, what does this mean and how safe is it to store GoCryptFS encryp… Continue reading GoCryptfs on cloud