search

Concordium / concordium-reference-wallet-android

Reference Android wallet for the Concordium blockchain
Apache License 2.0
12 stars 2 forks source link

Auto-Generated Screenshots (2.6) #9

Closed concordium-cl closed 3 years ago

concordium-cl commented 3 years ago

Bug Description Manufacturers want to provide device users an aesthetically pleasing effect when an application is entered or exited, so the system saves a screenshot when the application goes into the background. This feature could potentially pose a security risk for an application. Sensitive data could be exposed if a user deliberately takes a screenshot of the application while sensitive data is displayed, or in the case of a malicious application running on the device, that is able to continuously capture the screen. This information is written to local storage, from which it may be recovered either by a rogue application on a rooted device, or by someone who steals the device.

More Details See internal Concordium Mobile Application Security Assessment Report, section 2.6.

jensvesti commented 3 years ago

Fixed in 0.5.38

jens-concordium commented 3 years ago

Seems to be fixed in 0.5.38 indeed. I just see a white screen instead of a screenshot now, so I suppose this is working as intended.

@jensvesti, do you know if it's possible to show something similar to the splash screen instead of the solid white? If it takes too much time, I think the solid white is completely fine.