Skip to content
Snippets Groups Projects
  1. Dec 08, 2015
  2. Nov 30, 2015
  3. Apr 29, 2015
  4. Mar 23, 2015
  5. Jan 14, 2015
  6. Dec 29, 2014
    • akwizgran's avatar
      Don't try to erase secrets from memory. · 358166bc
      akwizgran authored
      1. The things we're really trying to protect - contact identities,
      message contents, etc - can't be erased from memory because they're
      encapsulated inside objects we don't control.
      
      2. Long-term secrets can't be protected by erasing them from memory
      because they're stored in the database and the database key has to be
      held in memory whenever the app's running.
      
      3. If the runtime uses a compacting garbage collector then we have no
      way to ensure an object is erased from memory.
      
      4. Trying to erase secrets from memory makes the code more complex.
      
      Conclusion: Let's not try to protect secrets from an attacker who can
      read arbitrary memory locations.
      358166bc
  7. May 09, 2014
  8. Apr 30, 2014
  9. Apr 07, 2014
  10. Apr 05, 2014
  11. Mar 10, 2014
  12. Mar 01, 2014
  13. Feb 27, 2014
  14. Feb 11, 2014
  15. Feb 05, 2014
  16. Jan 13, 2014
  17. Jan 09, 2014
  18. Jan 08, 2014
  19. Dec 19, 2013
    • akwizgran's avatar
      Replaced private messages with private groups. · 0dc86922
      akwizgran authored
      Private messages are now the same as group messages, but groups can be
      private or public. When a contact is added, a private group is created
      and designated as the inbox for exchanging private messages with the
      contact.
      0dc86922
  20. Nov 29, 2013
  21. Jun 17, 2013
  22. May 15, 2013
  23. Apr 30, 2013
    • akwizgran's avatar
      Save and restore UI state when screen is rotated. · 1aa701ce
      akwizgran authored
      Fixes issue #3611920, but keep the issue open because more activities
      will be added.
      1aa701ce
    • akwizgran's avatar
      Removed bundle encryption. · d5720c08
      akwizgran authored
      Android doesn't currently store bundles persistently, so it's premature
      to protect against accidental information leaks through persistent
      bundle storage. Protecting against deliberate information leaks by the
      OS is probably futile, so there's currently no need for bundle
      encryption.
      d5720c08
  24. Apr 18, 2013
  25. Apr 16, 2013
  26. Apr 13, 2013
  27. Apr 11, 2013
  28. Apr 08, 2013
Loading