Hi all, I'm developing an application that uses sensitive data extensively.
One thing I'm wondering developing the app is how Android handles bundles when persisting state. When putting data into a bundle in onSaveInstanceState(), where is that data stored once a fragment or activity no longer exists? Does it persist when the process is killed? And, more importantly, is it ever stored to disk, or does it exist only in the device’s memory, so that if the device were powered off it would be rendered difficult to recover? And also, does the same apply to fragment’s getArguments() and setArguments()? In other words, are these bundles suitable for putting sensitive data into? I would consider it suitable if the data is in memory but doesn’t persist onto disk. Thanks. -- You received this message because you are subscribed to the Google Groups "Android Security Discussions" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/android-security-discuss. For more options, visit https://groups.google.com/d/optout.
