On Monday, August 8, 2011 11:45:36 AM UTC-4, Thomas Cannon wrote: > > Well if it was an explicit Intent then in theory only your application can > be called via that Intent as you are referencing the specific component E.g. > Java Class to call. So other apps will not be able to "listen" on that > Intent. Note that I haven't assessed this myself, just going on the standard > documented behaviour.
Almost - except that someone else could create an application using the same package name as yours and install it on the device and thus receive intents specifically intended for you. They presumably can't distribute it via the Market if you are already distributing that package name there, and since their signature won't match yours the device won't let them have any private data files belonging to a version of your application previously installed, but they could replace you on a given device and receive intents directed to you by name. -- You received this message because you are subscribed to the Google Groups "Android Security Discussions" group. To view this discussion on the web visit https://groups.google.com/d/msg/android-security-discuss/-/PpQAE_j9tAYJ. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/android-security-discuss?hl=en.
