Enhancement: export/import from google docs

[GoogleCodeExporter]

Is it possible to transfer the csv to google docs?

Original issue reported on code.google.com by glenn...@gmail.com on 27 Sep 2010 at 5:50

[GoogleCodeExporter]

Hi glennoph,

This would required secrets to request internet permission, a permission that 
secrets should not request.

Are you looking for some kind of way to sync your secrets to the cloud?

Original comment by roge...@google.com on 27 Sep 2010 at 11:44

• Changed state: Invalid

[GoogleCodeExporter]

The goal was to export to external device.  perhaps a cloud would work.

Original comment by glenn...@gmail.com on 27 Sep 2010 at 11:50

[GoogleCodeExporter]

Hi glennoph,

Is existing export function not enough for your purpose?

Original comment by roge...@google.com on 28 Sep 2010 at 12:51

[GoogleCodeExporter]

If my phone were stolen, have a backup on a SD card inside my phone not help 
too much...

Original comment by france.g...@gmail.com on 22 Feb 2011 at 9:45

[GoogleCodeExporter]

Hi France,

If your phone is running Android 2.2, and you are using the latest version of 
secrets, your secrets are backed up to your Google account.  Should your phone 
be lost or stolen, you would be able to restore everything on a new phone, as 
long as you register with the same Google account.

Original comment by ro...@tawacentral.net on 23 Feb 2011 at 12:07

[GoogleCodeExporter]

Sorry, but i have an HTC Legend upgraded to Android 2.2 and Secrets 1.9.6, but 
i cannot find a backup of my secrets on my Google Account. 
There are only on my SD card.
Where can i find them on my Google account? 

Original comment by france.g...@gmail.com on 23 Feb 2011 at 8:36

[GoogleCodeExporter]

Hi,

to keep the file /sdcard/secrets permanent on the phone is a security risk in 
case you use a short password and your phone is stolen or an maliciously app is 
transferring the file to an evil host. As the file on /sdcard can be read by 
any application on the phone, which has the permission 
"android.permission.WRITE_EXTERNAL_STORAGE".

A 1.8 GHz machine was able to probe 1400 passwords per second. So the restore 
of a 6 characters long password took around 3 days. 

Maybe it's worth to force the users to enter a password with a minimum length 
or use a device dependent salt (which must be backed up separately) in the 
cipher.

cheers
Frank

Original comment by Dietrich.Frank@gmail.com on 24 Feb 2011 at 8:12

[GoogleCodeExporter]

I am working on using a different key generator, and at the same time using a 
device dependent salt.  See the bcrypt branch at 
http://code.google.com/p/secrets-for-android/source/browse/#svn%2Fbranches%2Fbcr
ypt for the current state of that code.  I am waiting for a review from 
security folks to make sure its OK.

The need for SD backup is diminished with the backup support built into Android 
2.2.  However, it will never go away, since some Android 2.2 or later devices 
may not have support for backup; depends on your manufacturer and/or carrier.  
Once its easy to check if your secrets have been backed up to your Google 
account, I may remove the current weekly nag to backup.

France: Unfortunately, there is currently no way to check whether your secrets 
have been backed up to your Google account.  I am looking for a solution though.

Original comment by roge...@google.com on 24 Feb 2011 at 3:55

[GoogleCodeExporter]

Hi,
Can you simply transfer the encrypted backup of secrets from phone to my google 
docs?

Original comment by france.g...@gmail.com on 27 Feb 2011 at 5:46