i2pd-android
i2pd-android copied to clipboard
Security Vulnerability: Sensitive Data Stored on External Storage
i2pd for Android has a security vulnerability: all configuration data, including tunnel keys, is stored on external storage (e.g., SD card). This exposes the data to potential access and modification by any application granted access to the SD card, risking key leakage, unauthorized configuration changes, and security breaches.
Suggested Fix:
Store sensitive data, such as tunnel keys and configurations, in internal storage to prevent unauthorized access and ensure data security.