QuantumBadger / RedReader

An unofficial open source Android app for Reddit.
GNU General Public License v3.0
2k stars 482 forks source link

feature - increase on disk security #148

Open httpless opened 10 years ago

httpless commented 10 years ago

Hello. This is follow on from #147

The guardianproject created a number of libraries for developers to use in their software to improve their security.

I would like to make the suggestion that you implement their IOCipher and SQLCipher[1] libraries into RedReader

The biggest benefits would be

IOCipher:

If on install a user chose not to set a password RedReader would be stored on the device as normal

SQLCipher

[1] https://guardianproject.info/code/iocipher/ https://guardianproject.info/code/sqlcipher/

peterclemenko commented 10 years ago

I would like to suggest the ability to specify multiple containers for different user groups. As an example, one might have one group dedicated to standard stuff, such as programming, and another group related to activism. This would allow for the ability to have less chance of a user being compromised completely if someone gets a hold of their phone while redreader is unlocked.

I would also like to suggest a method similar to the Guardian Project's Courier app which allows you to have a configuration so that entering a wrong password multiple times, or a kill password, allows you to nuke that container. That would help in event someone is trying to coerce a user in to giving up a password.

grrrrr commented 9 years ago

@aolghost i do not think this is possible with SQLCipher