i2pd-android icon indicating copy to clipboard operation
i2pd-android copied to clipboard

Security Vulnerability: Sensitive Data Stored on External Storage

Open ghost opened this issue 11 months ago • 1 comments

i2pd for Android has a security vulnerability: all configuration data, including tunnel keys, is stored on external storage (e.g., SD card). This exposes the data to potential access and modification by any application granted access to the SD card, risking key leakage, unauthorized configuration changes, and security breaches. p

Suggested Fix:

Store sensitive data, such as tunnel keys and configurations, in internal storage to prevent unauthorized access and ensure data security.

ghost avatar Jan 04 '25 11:01 ghost