At Tue, 18 Oct 2011 09:22:39 +0200,
Thomas Perl wrote:
> 
> Hi,
> 
> On Tue, Oct 18, 2011 at 06:09:32AM +0000, [email protected] wrote:
> > Hi. So, no automatically generated device id as the documentation
> > says? How can I then be sure that the device id I give (e.g. N9) is
> > then unique?
> 
> Add some hash + application name (if it's not the original gPodder
> client) + device name, e.g. for a N9 running your Podcasts app:
> 
>   podcasts-n9-a6b78d9c
>   ^ App name
>            ^ Device name
>               ^ (possibly cropped) Hash (e.g. hash of IMEI+current time)
> 
> Please make sure that you hash or otherwise obfuscate any identifying
> information like the IMEI (ideally with some random data, because
> otherwise people could maybe derive (parts of) the IMEI from the ID.
> 
> The device ID is not really visible to the user (apart from the URL in
> the normal website interface), and there's a special field for the
> user-visible string.

Why risk exposing any bits of the IMEI?  Why not just use
/dev/urandom?

Neal
_______________________________________________
gpodder-devel mailing list
[email protected]
https://lists.berlios.de/mailman/listinfo/gpodder-devel

Reply via email to