Here we go: http://developer.android.com/guide/topics/data/data-storage.html#db
"Android provides full support for SQLite <http://www.sqlite.org/> databases. Any databases you create will be accessible by name to any class in the application, but not outside the application." On Mon, Sep 26, 2011 at 14:45, Subbu Srinivasan <[email protected]>wrote: > Right on Kevin. > > Forget Android security. > > Today in server - foolishly people assume firewalls, DB cannot be hacked > etc. But this is a fallacy. > In Android, you can put it in sqllite, but that data is persisted somewhere > in disk unencrypted. AFAIK Android does not encrypt anything on flash(unlike > iOS) . So anyone who > roots the device gets full access. > > > > > On Mon, Sep 26, 2011 at 11:31 AM, Kevin Chadwick <[email protected]>wrote: > >> On Mon, 26 Sep 2011 12:55:40 -0300 >> Guilherme Vieira <[email protected]> wrote: >> >> > The local SQLLite is safe, isn't ? >> >> Only the people concerned can answer this, security is a process not a >> product. >> >> They've put some effort into security but Android is no where near a >> bastion host. >> >> IMHO Android is more secure than a Blackberry but an Android that is >> used for web browsing is less secure than a Blackberry that only >> accesses text email and no attachments (ignoring the enterprise server >> monstrosities). >> >> A server has open ports, how secure is the listening program and >> transport. >> >> Is it encrypted before storing in the database, how secure is the >> algorithm, can the Android device be rooted and if so is the key really >> safe. Are you hoping it will be stolen whilst turned off? >> >> >> What level of security is acceptable to you, or ask a more specific >> question like, how to encrypt data before storing locally via sql? >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Android Security Discussions" group. >> To post to this group, send email to >> [email protected]. >> To unsubscribe from this group, send email to >> [email protected]. >> For more options, visit this group at >> http://groups.google.com/group/android-security-discuss?hl=en. >> >> > -- > You received this message because you are subscribed to the Google Groups > "Android Security Discussions" group. > To post to this group, send email to > [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/android-security-discuss?hl=en. > -- You received this message because you are subscribed to the Google Groups "Android Security Discussions" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/android-security-discuss?hl=en.
