flyfire / android-notifier

Automatically exported from code.google.com/p/android-notifier
0 stars 0 forks source link

"Paired" phone continues to multicast on wifi #103

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
When a phone is "paired" to a client it continues to openly multicast its 
messages on the wifi network.

This is an issue because I have multiple android/mac users on my network, each 
wanting to use the system. A message from any phone is visible on any computer 
on the network. The privacy of our SMS and phone information is dependent on 
each user selecting "Only receive notifications from these devices." As such, 
for mutually untrusting wifi neighbors the system can't be used.

To fix, a simple "paired" bit sent with messages would suffice to prevent 
eavesdropping. The desktop client would only catch messages with the bit set if 
the device ID matches the paired device ID stored. This would suffice only for 
undetermined attackers, which is fine at this point, I imagine.

Original issue reported on code.google.com by SCoo...@gmail.com on 10 Sep 2010 at 4:41

GoogleCodeExporter commented 9 years ago
You can change the target IP address to be that of the machine you want to 
receive notifications only.
I'll also add encryption support so that a message from the phone will only be 
visible in computers that are configured with the same passphrase.

Would this be enough?

Original comment by rdamazio@gmail.com on 10 Sep 2010 at 5:34

GoogleCodeExporter commented 9 years ago
Ah, yes, I see IP selection now. That should work fine. Thanks.
Maybe a note in the "pairing" section about this feature?

Original comment by SCoo...@gmail.com on 10 Sep 2010 at 5:58

GoogleCodeExporter commented 9 years ago
Yes, I need to update documentation on IP setup.

Original comment by rdamazio@gmail.com on 10 Sep 2010 at 5:59