Bug #4159
create password handling Intent and add to KeePassDroid, etc.
| Status: | New | Start date: | 11/27/2014 | |
|---|---|---|---|---|
| Priority: | Normal | Due date: | ||
| Assignee: | - | % Done: | 0% | |
| Category: | - | |||
| Target version: | - | |||
| Component: |
Description
given that password managers usually use the clipboard, which is easy to exploit:
http://arstechnica.com/security/2014/11/using-a-password-manager-on-android-it-may-be-wide-open-to-sniffing-attacks/
This would be a very nice application of our TrustedIntents library. We could
define an Intent method for handing a password, then add TrustedIntents to
KeePassDroid and then our apps, especially Orweb and Orfox. I think that
would serve as a good example as a way to fix this issue without having to
change Android itself at all.