Bitcoin Forum
May 08, 2024, 12:41:10 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 2 [3]  All
  Print  
Author Topic: [ANNOUNCE] Casascius-compatible address tool for Android.  (Read 4226 times)
VTC
Member
**
Offline Offline

Activity: 84
Merit: 14



View Profile
November 03, 2013, 05:47:08 PM
 #41

Some suggestions/improvements for security:

- On the newer androids, the screenshot of the last state of the application is saved when switching programs.
 Unfortunately, there might be no way to fix this when a user switches apps.  Providing an exit button would be an option for those that utilize it.

- When scanning the public key, a rogue QR app scanning app (or a third party person) can see the brainwallet passphrase.
Suggestion to display the QR code with a full screen white background.  Additionally, bitaddress.org has a hide/show password for the brainwallet, can add a checkbox to show typed passphrases as ********.

-Lock the screen orientation upon startup, or do not allow a change in screen orientation to exit the QR code on fullscreen.  Again, a rogue QR scanning app, trojan with webcam access, or third party human will see the brainwallet passphrase and privatekey.
1715128870
Hero Member
*
Offline Offline

Posts: 1715128870

View Profile Personal Message (Offline)

Ignore
1715128870
Reply with quote  #2

1715128870
Report to moderator
The grue lurks in the darkest places of the earth. Its favorite diet is adventurers, but its insatiable appetite is tempered by its fear of light. No grue has ever been seen by the light of day, and few have survived its fearsome jaws to tell the tale.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
VTC
Member
**
Offline Offline

Activity: 84
Merit: 14



View Profile
November 07, 2013, 03:23:49 PM
 #42

Can you consider making one app (or two separate apps) that replicate the features of bitaddress.org and brainwallet.org.

I'm not familiar with android development, but all you need to is package the github html and javascript files and the app is just a no permissions no internet access browser.  You start the app, choose brainwallet or bitaddress.  And voila, an offline version!
Pages: « 1 2 [3]  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!