> I think they were trying to constraint it that that the apps don't > have android.permission.WRITE_EXTERNAL_STORAGE and only one had internet > permission and presumably want to know if its possible to use Binder based > RPC. but yes, I assume one app can publish as a service and the other could > bind to it. not sure if any permissions are needed for that.
Right, you can set up a no-Permission-required Service or other Binder-based IPC. Note that even if an app doesn't have INTERNET, it can still talk to the internet. My Lookout published some mechanisms for doing this at Black Hat last year. -- You received this message because you are subscribed to the Google Groups "Android Security Discussions" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/android-security-discuss?hl=en.
