heruoxin / Clip-Stack

[deprecated]
https://play.google.com/store/apps/details?id=com.catchingnow.tinyclipboardmanager
MIT License
910 stars 314 forks source link

Clip-Stack as accessibility service security issue due to Android bug #50

Open bungabunga opened 8 years ago

bungabunga commented 8 years ago

There's an Android bug that disables FDE encryption on your device whenever you grant some app accessibility access.

more: https://blog.g3rt.nl/android-lollipop-encryption-user-interface-flaw.html

I wonder if the accessiblity service feature of Clip-Stack shouldn't be removed due to this bug.

ankitpati commented 8 years ago

Instead of disabling the accessibility service, Clip Stack should direct users to re-enable strong encryption by changing the password, or even setting it to the existing one, after being granted accessibility permissions.