大体できた/セキュリティの懸念など2009/11/29 18:00

Android上でのパスワード管理ツール、機能的には大体完成した。これからのブラッシュアップがまた長かったりしそうだが・・・

  • "ant uninstall"ではアンインストールに失敗する。(送信しているパッケージ名が間違ってる?)"adb uninstall com.XXX.YYY.ZZZ"などとする。実際のパッケージ名はAndroidManifest.xmlに書かれているものと同じ。
  • パスワードのアルゴリズムをSHA1+3DESにしようとしたが、アルゴリズム名"PBEWithSHA1AndDESede"が使用できない。調べたところ、BouncyCastleのモジュールを組み込んでいるらしく、こちらでは"PBEWithSHAAnd3KeyTripleDES"と指定しなければならないようだ。ああ、めんどくさい・・・。OID("1.2.840.113549.1.12.1.3")で指定する方が間違いがないのかな?
  • Dialogの使い方は、リソースを指定して画面を作り、リソースIDからWidgetを引っ張ってくるなど、Activityに近い。おかげで、例えばDialogの戻り値を見てどうこうというのをコード上でシリアルに書けない。そういう思想だというのはわかるが、やっぱりかったるいな。
  • ソースコード上にコメントを書こうと思ったが、Asciiのみで、UTF8を受け付けていない。ant関係の設定ファイルで、わざわざencodingを指定していやがる・・・余計なことを。修正はできるようだが(こちらを参照)、SDKアップデートの度にやらんといけないとは・・・。


いくつか懸念事項があって、どれもセキュリティがらみとなる。例えば、
  • マスターパスワードの情報をどう保存するか?
入力されたマスターパスワードが正しいかチェックするための情報が必要なのだけど、平文で保存は論外。今は自分自身をパスワードとして暗号化して保存しているのだけど、本当はハッシュ値程度で十分。ただそれも、短いパスワードを使用されると簡単に破られるし、ソースを公開する予定だからSalt値もたいして役には立たない・・・。
ちなみに自分が参考にしているPalmOS用のKeyRingでは、Saltを加えたMD5ハッシュ値を使用しているようだ。

ま、もう少し考えてみるとしよう。

コメント

_ hallux valgus causes ― 2015/08/02 16:01

Great goods from you, man. I've understand your stuff previous to and you are just too magnificent. I really like what you have acquired here, really like what you're stating and the way in which you say it. You make it entertaining and you still care for to keep it wise. I cant wait to read much more from you. This is actually a terrific web site.

_ Foot Supination ― 2015/08/02 22:27

I all the time used to study piece of writing in news papers but now as I am a user of internet therefore from now I am using net for articles or reviews, thanks to web.

_ Pof Sign In Now ― 2015/10/18 00:44

hi!,I love your writing so so much! percentage we keep in touch extra approximately your article on AOL? I require an expert in this house to resolve my problem. Maybe that's you! Taking a look ahead to look you.

_ where to purchase quest bars ― 2015/10/18 20:56

Everything is very open with a very clear explanation of the issues. It was truly informative. Your website is useful. Thanks for sharing!

_ 3 days free match trial ― 2015/10/27 10:51

Woah! I'm really loving the template/theme of this blog.
It's simple, yet effective. A lot of times it's tough to get that "perfect balance" between superb usability and appearance.

I must say that you've done a amazing job with this.
Additionally, the blog loads extremely quick for me on Safari.
Superb Blog!

_ pure forskolin ― 2015/11/03 11:41

This is a very good tip particularly to those fresh
to the blogosphere. Simple but very accurate
information… Appreciate your sharing this one. A must read post!

_ plenty Of fish dating site of Free dating ― 2015/11/05 22:42

Hello There. I found your blog using msn. This
is a really well written article. I will be sure to bookmark it and come
back to read more of your useful information. Thanks for the
post. I'll certainly comeback.

_ plenty of fish dating Site of free dating ― 2015/11/07 15:53

This site truly has all of the information I needed concerning this subject and didn't
know who to ask.

_ justin bieber dating ― 2015/11/08 22:02

Hi to every body, it's my first go to see of this weblog;
this web site contains remarkable and really fine stuff designed for readers.

_ digital coupons kroger ― 2015/11/15 17:36

Thank you for some other informative web site. The
place else may just I am getting that kind of info written in such a perfect way?
I have a project that I am simply now operating on, and
I have been at the glance out for such info.

_ Kroger digital coupons Paperless ― 2015/11/16 11:18

I visited several web sites except the audio quality for audio songs existing at this site is
truly marvelous.

_ www.krogerfeedback.com ― 2015/12/05 02:42

continuously i used to read smaller articles that as well clear their
motive, and that is also happening with this post which I
am reading at this time.

_ plenty of fish ― 2015/12/05 23:40

Yes! Finally something about pof.

_ plenty of fish ― 2015/12/06 00:17

Highly energetic post, I enjoyed that a lot.
Will there be a part 2?

_ krogerfeedback.com ― 2015/12/11 00:54

For latest information you have to visit world-wide-web and on internet I found this web site as a best web site for latest updates.

_ krogerfeedback.com ― 2015/12/14 06:19

Hello to every one, because I am truly eager of reading this blog's post to be updated regularly.
It consists of fastidious stuff.

_ krogerfeedback.com ― 2015/12/19 22:59

This site was... how do I say it? Relevant!!
Finally I've found something that helped me.
Many thanks!

_ krogerfeedback.com ― 2016/01/04 04:25

Everyone loves it when individuals come together and share views.
Great website, keep it up!

_ quest bars ― 2016/02/09 07:21

Hi my friend! I wish to say that this article is awesome, great
written and come with approximately all important infos.
I'd like to see more posts like this .

_ quest bars ― 2016/02/09 11:41

This is my first time pay a quick visit at here and i am genuinely impressed
to read everthing at single place.

_ quest bars ― 2016/02/09 16:54

I blog often and I truly thank you for your information. This
article has truly peaked my interest. I'm going to take a note of
your blog and keep checking for new details
about once per week. I subscribed to your Feed too.

_ bernie Sanders ― 2016/03/31 21:40

Wonderful beat ! I would like to apprentice even as you amend your site, how can i
subscribe for a blog site? The account helped me a appropriate deal.
I were a little bit familiar of this your broadcast provided bright clear idea

_ Mincraft ― 2016/07/03 04:13

An impressive share! I have just forwarded this onto a coworker who had been conducting a little research
on this. And he actually bought me breakfast simply because I discovered it for
him... lol. So let me reword this.... Thank YOU for the meal!!
But yeah, thanks for spending some time to talk about this issue
here on your web site.

_ Mincraft ― 2016/07/03 08:20

You need to be a part of a contest for one of the finest blogs
online. I am going to highly recommend this site!

_ j.mp ― 2016/07/09 18:31

Heya i'm for the first time here. I found this board and
I find It truly useful & it helped me out much.
I hope to give something back and aid others like you helped me.

_ www.krogerfeedback.com ― 2016/07/14 17:32

magnificent issues altogether, you just received a new reader.

What may you suggest in regards to your post that you just made some days ago?
Any positive?

_ www.krogerfeedback.com ― 2016/07/26 01:06

Hi mates, good article and fastidious arguments commented here, I am in fact enjoying by these.

_ fix connections to bluetooth audio devices and wireless displays in windows 10 ― 2016/08/19 06:57

Hi, I do think this is an excellent blog. I stumbledupon it ;) I will
come back once again since I book-marked it. Money and freedom is
the greatest way to change, may you be rich and continue to guide other people.

_ fix connections to bluetooth audio devices and wireless displays in windows 10 ― 2016/08/19 07:28

My brother suggested I would possibly like this blog. He was once
totally right. This post truly made my day. You can not imagine just how so much time
I had spent for this information! Thanks!

_ quest bars ― 2016/09/24 15:03

Fine way of describing, and nice post to obtain facts regarding my presentation subject, which i am
going to deliver in school.

_ quest bars ― 2016/09/25 10:16

I every time emailed this web site post page to all my
contacts, for the reason that if like to read it afterward my friends will too.

_ plenty of fish dating site of free dating ― 2016/10/04 07:10

Hi there! I could have sworn I've visited this web site before
but after browsing through many of the articles I realized it's new to me.
Regardless, I'm certainly pleased I stumbled upon it and I'll be book-marking it and checking
back regularly!

_ quest bars ― 2016/10/05 18:27

Good post. I learn something totally new and challenging on blogs I stumbleupon everyday.
It will always be helpful to read through content from other authors
and use something from other web sites.

_ quest bars ― 2016/10/05 22:20

If some one wishes expert view on the topic of blogging
and site-building after that i advise him/her to pay a visit this website,
Keep up the pleasant work.

_ minecraft ― 2016/10/11 22:17

fantastic points altogether, you just gained a emblem new reader.
What would you recommend in regards to your post that you simply made a few days ago?

Any certain?

_ minecraft ― 2016/10/14 02:39

I was recommended this website by my cousin. I am not sure whether this post is
written by him as no one else know such detailed about my trouble.
You're amazing! Thanks!

_ juegos de minecraft ― 2016/10/15 06:20

My programmer is trying to convince me to move to .net from PHP.

I have always disliked the idea because of the costs.

But he's tryiong none the less. I've been using WordPress on a variety of websites for about a
year and am anxious about switching to another platform. I have heard fantastic things about blogengine.net.
Is there a way I can transfer all my wordpress posts into it?
Any help would be really appreciated!

_ flavors quest bars ― 2016/11/20 05:16

Wonderful goods from you, man. I've understand your stuff previous to and you're just too excellent.

I really like what you've acquired here, really like what you're saying and the way in which you say it.
You make it entertaining and you still care for to keep it wise.
I cant wait to read far more from you. This is really a wonderful web site.

_ tinyurl.com ― 2016/12/02 00:47

I'm amazed, I have to admit. Seldom do I come across a blog
that's both equally educative and entertaining, and
without a doubt, you have hit the nail on the head.
The issue is something not enough men and women are speaking intelligently about.
I am very happy I stumbled across this in my
search for something regarding this.

_ tinyurl.com ― 2016/12/02 09:04

Everything is very open with a very clear
clarification of the issues. It was really informative.
Your website is extremely helpful. Thank you for sharing!

_ free dating sites no fees ― 2016/12/10 14:16

No matter if some one searches for his vital thing, thus he/she needs to be available that in detail,
therefore that thing is maintained over here.

_ Gamefly ― 2016/12/18 08:54

Great delivery. Great arguments. Keep up the great work.

_ Gamefly Free Trial ― 2016/12/19 01:43

I'm not sure where you're getting your information, but good
topic. I needs to spend some time learning more or understanding
more. Thanks for magnificent information I was looking
for this info for my mission.

_ Gamefly ― 2016/12/20 08:33

Hey! Do you know if they make any plugins to safeguard against hackers?
I'm kinda paranoid about losing everything I've worked hard on. Any tips?

_ Gamefly Free Trial ― 2016/12/21 09:12

Your style is very unique in comparison to other folks I have read stuff from.
Many thanks for posting when you have the opportunity, Guess I'll just book mark this web site.

_ www.krogerfeedback.com ― 2016/12/24 20:13

Good response in return of this issue with firm arguments and explaining the whole thing on the topic
of that.

_ www.krogerfeedback.com ― 2016/12/25 05:52

Informative article, exactly what I needed.

_ www.krogerfeedback.com ― 2016/12/26 03:03

I am curious to find out what blog platform you are using?

I'm having some minor security issues with my latest blog and I'd
like to find something more secure. Do you have any recommendations?

_ www.krogerfeedback.com ― 2016/12/26 03:30

I just like the helpful info you supply for your articles.

I will bookmark your blog and check once more right here
regularly. I'm quite certain I'll be told many new stuff proper here!
Best of luck for the next!

_ match.com usa ― 2017/01/04 08:35

I always spent my half an hour to read this blog's articles or reviews daily along with a
mug of coffee.

※コメントの受付件数を超えているため、この記事にコメントすることができません。

トラックバック

このエントリのトラックバックURL: http://napple.asablo.jp/blog/2009/11/29/4725944/tb