search

guardianproject / ChatSecureAndroid

This project has ended, but ChatSecure iOS continues. For Android, please use Conversations or Zom instead
https://chatsecure.org/blog/chatsecure-conversations-zom/
Apache License 2.0
1.07k stars 521 forks source link

defeating screenshot attempts #87

Open n8fr8 opened 13 years ago

n8fr8 commented 13 years ago

I noticed that you can't take screenshots (which is also fantastic). However, I just thought of an idea, and tried it, and I was able to take a screenshot. This could be a security issue ?

I run cyanogenmod 7.1.0 stable

What I did was, select screenshot from the power menu (there is like a 5s timer before it actually takes a screenshot). In that time, I rotated the orientation and i was able to take a screenshot of the conversation. Im not sure if people know about this trick, and i dont want to advertise this trick either for security reasons.

I thought I'd let you know that it is possible to take a screenshot. I hope it gets corrected (but it could be just the way android handles screen orientations).

Kensan commented 12 years ago

There is a WindowManager layout parameter flag called FLAG_SECURE:

http://developer.android.com/reference/android/view/WindowManager.LayoutParams.html#FLAG_SECURE

Unfortunately this does nothing to prevent taking a screenshot via the CM powermenu. This might however improve things on ICS devices.