Security config needed. - Android Software Development

Hey,
I am currently working for IBM, and here we are facing an issue that violates our security policies, so we cant port certain programs to our brand new android phone.
The "request" i have is the following:
We're exploring iNotes Ultra-light (web-based mail) which is also supported for Android. However, one of the item we're struggling with is implementing IBM security policy on the device. Unlike Apple iOS which has a mobile configuration utility, Android doesn't appears to have an equivalent to set device password (8 character, alphanumeric, 90 day expiration, wipe after 10 invalid attempts). I welcome input from the community on how we might address this requirement.
Why should anyone start working on it?
It would be simply for the pride. Imagine to develop a tool, that even the IBM development team is struggling with. It is a big achievement for anyone i think.
So task is open for every developer
Thank you guys.

For someone working for IBM your english isn't very good.
What exact constraints do you want to put on the phone? Make sure that the password for unlocking the phone is 8 char, alphanumeric, etc?
I thought Google had done a bit of corporate development for android 2.2 - had you looked at that stuff? I think they talked about it somewhere in Japan.

ivolol said:
For someone working for IBM your english isn't very good.
What exact constraints do you want to put on the phone? Make sure that the password for unlocking the phone is 8 char, alphanumeric, etc?
I thought Google had done a bit of corporate development for android 2.2 - had you looked at that stuff? I think they talked about it somewhere in Japan.
Click to expand...
Click to collapse
Ah, yea my English might not be perfect, but IBM is an international corporation and im working in one of the European countries. Thats why
Also the "request" i did not write. It was copied from one of the insider forums and pasted here.
About the issue i think the problem is with the options (if the basic passwd requirements are configurable [ 8 char, alphanumeric]) to set a maxage and minage, and as well the wiping of the device if the password is entered 10 times incorrectly.

Bump
<too short>

Bump again
I am bumping this thread again, and i noticed there were more people interested in it, than only me. Android is just not good for Enterprise usage. I dont think the problem is a hardware problem, more like a proper softer at boot up, but i am really not into Android programming, especially not to this depth, that is why i turned to this community.
An other thread about the same issue here :
http://forum.xda-developers.com/showthread.php?t=784282

Related

Job offer ......of sorts!

Hey guys I hope you dont have any objections to this, if it is against any policies you have just let me know.
Ok the meat is, I am forming a very early stage start up.
I am UK based with (sadly!) no language skills so youll have to be English speaking.
I am seeking a developer to help me put together a prototype software suite.
I do not know this platform AT ALL, so youll have to know how to acces databases via vpn.( may need knowledge of the server side too) youll also have to understand the operations of the bluetooth stack with regards to sending print files.
And lastly you will need to be able to implement and debug a visual input sytem.
Its actually quite basic stuff, but I have no time to learn it as my bank wants to see a prototype ASAP.
Again I apologise if this is against your policy, but I need to get the ball rolling.
To clarify, as I am currently in patenting process I cant discuss much yet, but this can go two ways;
1: If you have the skills I need and spare time we agree on a price and timescale, I pay you for your work, then you walk away.
2: We discuss the project, you come on board with skills provided in return for a percentage of company.
This could be a great oppurtunity either way.
Thanks for listening.
I would prefer an email at [email protected]
What will it take?
I was disappointed to see no responses but oh hey!
SO? what am I doing wrong? what would it take to get some development skills in my pocket?
I would offer a go on the missus but shes not speaking to me right now for ignoring her.
Any advice pos' or negative would be cool.
Cheers guys.
If I were you I'd scan the Development forum and look at our community developers to see what they have done. Some of the more popular and highly respected are
A_C for S2U2 and S2V
Tene for PocketCM and PCM Keyboard
Thundershadow14 for PocketMelody and PictureFlow
DotFred for TaskManager and PPCPIMBackup
Vijay555 for (too much to name)
Slither2006 for SCLPC++
Grumps for iPhone App
I'm sure I missed out a lot of others with some real quality stuff. But I'm just naming off those who has produced software that I use most frequently and/or always see at the top of the Development forum cause the thread is so active. Sorry if I offended anyone by not naming them.
So check out the guys that I listed above and see if they have exhibit the skills that you need require for your project. Also if you need help with the design-side we also have plenty of good GUI/skinning guys.
Appreciated.
I will go check the area you suggested, so thanks for the heads up.
At the moment I am just interested in a rough and ready usable system to show the bank, but Ill definately remember your offer if they like what they see.
Again, thanks bud. And wish me luck.
PS If I wanted to learn the coding myself, do you think it would be completely improbable to do so myself in say 4 weeks?
(I am a mechanical engineering student so not completely dense but pretty busy).
And where would be a good place to start?
Thanks in advance.
You have to find a C++ book and get comfy with that. Then you'd have to look at the Windows Mobile SDK and combine the knowledge of both. Plus its trial and error because its running on different hardware.
Its a daunting task. It took me a good year fulltime to become a decent website developer. The hard part is thinking like a "programmer". Otherwise it'll look like its an alien language
Good luck with it.
Hey Mate,
I'd love to help although I've never worked in the areas you require. I'd recommend posting a slightly more detailed job requirements criteria so you may attract the right young budding enthusiast.
If you're creating software a bank will wish to use then the security side of the VPN will need to be top notch along with the methods in which the app will access data.
Unfortunately I'm more of a GUI designer and the only databases I access are the MS POOM databases for Outlook.
Good Luck!
Can I add I'd _never_ take someone seriously who's asking to reply to a hotmail.* / gmail.* / yahoo.* etc etc, address.
kirstan said:
Can I add I'd _never_ take someone seriously who's asking to reply to a hotmail.* / gmail.* / yahoo.* etc etc, address.
Click to expand...
Click to collapse
Erm Ok !!! I dont know what to say to that. That is the account I use most often. I didnt claim to rep IBM! This is a personal project and Im just trying to make contacts.
Regarding an other post above, The VPN is further down the road and not needed yet. Also the software will not be USED by a bank just shown to them as a proof of concept.
At that point I would be able to go beyond an overdraft to an actual business loan and be able to contract a developer.
It is hard for me to Give much detail without an NDA as my idea is not revolutionary but the application is novel.
If I were to discuss openly I would lose the ability to patent down the line.
It is essentially A GUI that I need, and a simple underlying app which will give me the ability to enter a small description in 30 odd fields.
When each field is selected a score of -1 is applied (the field value is initially zero).
At the end of a session, ( there will be an option to open new or close a session) a score is given to each field and depending on score, one of 90 text files (3 per field) is linked to.
A print file containing these 30 text files on one page and a score from 0 to -10 for each field in a table on the other page is then produced.
The database access and VPN would come later on but in the prototype that is all thats needed.
Im sorry thats about all the exp' I can give in open. But if you feel you could help and would like to get involved I could arrange an NDA.
I am currently speaking to a couple of people but there is nothing concrete yet so if at all interested, do get in touch.
Thanks for reading (and please take me seriously whatever my Email.)
solved.
Just in case anyone was interested, I finally found help on a site called Rentacoder so if anyone else is looking for development help, try there.
Cheers.

G1 Rant & Rave

hello all and congrats on the new forum
the android in its current state is quite a poor business phone compared to winmo6.1 for a few reasons. can you all chip in in identifying the areas of weakness just to help out developers who want to do something about it
ill start by mentioning the obvious things to me
1. no exchange mail support with search server and html mail(maybe a roadsync port is needed)
2. no mention of vpn support
3. the join domain feature of wm6.1 was kinda useful to some
4. the only platform that can access our eap-tls network in wm5/6.
5. not sure its a big thing, but maybe a basic firewall is needed.
6. an option less integration with gmail (not good for corporations who have security concerns)
7. reader/editor for office 2k7 documents
8. remote desktop (windows, osX, linux)
9. maybe bundling all the buisness features as a single software pack (that does not need to be included with all sold phones if not many people are intrested) this will simplify development and updates.
10. out of box wirless 3g/edge modem or something similar to WiFiRouter.
that's what i can think of for now. feel free to repost this in a more visible android forum
well then don't get it
whats with the hostility. I'm just trying to make android a more attractive platform by highlighting its business shortcomings.
if we can get developers interested in developing these kind of apps early in its life to make it more corporate friendly it would be great.
taking care of business and core features are far more important than cool 'n' pointless apps that the iphone seems to be handling pretty well.
more stuff:
8. remote desktop (windows, osX, linux)
9. maybe bundling all the business features as a single software pack (that does not need to be included with all sold phones if not many people are interested) this will simplify development and updates.
10. out of box wireless 3g/edge modem or something similar to WiFiRouter.
since it's linux I have no doubt that most of your worries will be addressed. I know Linux has a remote desktop app but the question is will the android run non-java apps? Will it have GCC and some libs? Can we download GCC and some libs to our microSDHC cards? Will SSH work? Will the android GUI have X11-like network support? I am not much of a programmer but if the android has gcc and libs I will be doing some compiling of linux apps.
dagentooboy said:
since it's linux I have no doubt that most of your worries will be addressed. I know Linux has a remote desktop app but the question is will the android run non-java apps? Will it have GCC and some libs? Can we download GCC and some libs to our microSDHC cards? Will SSH work? Will the android GUI have X11-like network support? I am not much of a programmer but if the android has gcc and libs I will be doing some compiling of linux apps.
Click to expand...
Click to collapse
Im about 95% certain that all apps run inside android's java environment. Therefore any existing opensource application would have to be ported over to the specifications of android's java language.
Android as an operating system is just a linux executable binary. Think of it like X server. Android is just a GUI, but as of now everything that runs in that GUI has to be specifically written for android.
It may be possible to run seperate tty sessions... and that could allow you to run some sort of server in the background behind android that you could access from inside of android via a web browser (http://127.0.0.1 aka localhost style)
mburris said:
Im about 95% certain that all apps run inside android's java environment. Therefore any existing opensource application would have to be ported over to the specifications of android's java language.
Android as an operating system is just a linux executable binary. Think of it like X server. Android is just a GUI, but as of now everything that runs in that GUI has to be specifically written for android.
It may be possible to run seperate tty sessions... and that could allow you to run some sort of server in the background behind android that you could access from inside of android via a web browser (http://127.0.0.1 aka localhost style)
Click to expand...
Click to collapse
yeah... that's what I thought. I was hoping that wasn't the case.... I can dream right? Maybe it will be like the Zaurus all over again and we can write an X11 environment for it.
Nr. 1, the Exchange feature was mentioned at the launch, and the official answer was "we expect developers to provide applications for that". I think that also applies to the VPN part; since it's that open and that linux-ish, there will probably be lots of VPN/VNC/RDP/SSH clients available.
3 and 4, I don't even know what they are. Stuck in a Windows-based environment, with closed specs ? tough luck. That's vendor lock-in, you know.
5 - a firewall ? what for ? Your device won't be permanently connected, and you probably won't have lots of apps listening on your phone. Anyway, a filtering module will probably appear pretty soon. I'd be more worried about installed apps making hidden outgoing connections (apps calling home, or malicious apps), therefore a good app to have would be something similar to LittleSnitch.
6 - Google has service offerings for businesses, so you either choose to use their services, or you don't. If you don't like it, you shouldn't use this phone I guess
7 - the feature will appear for sure, at least the viewer part. Not hoping of a OpenOffice port for Android, though.
This phone actually doesn't look like it was built for business use, though; just take a look at the apps who won the contest, all of them are focused on fun, socializing, location-awareness and stuff that's useful to people, not business users.
Hmm, to follow up on the Office part:
http://www.informationweek.com/news/personal_tech/smartphones/showArticle.jhtml?articleID=210604042
"We expect it to be more for the consumer, not necessarily for enterprises," says Cole Brodman, chief technology and innovation officer at T-Mobile USA.
The 4.6-by-2.1-by-0.6-inch handset, which will go on sale in the United States on Oct. 22, will let users view Word and Excel documents as well as PDFs.
a few points:
a*you didnt coment on 8-10
b*the exchange feature needs licencing from mirosoft. i doubt the development comunity can do that. unless some genius cracks the airsync protocol
c*if you are on gprs/edge/3g then the phone is Always connected to the network. that why we have things like pushmail.
d*eap-tls is the most secure type of wirless access. and it uses certificates on both the server and client. the client normally needs to be part of the domain to be able to accept the certificate
e*almost all corporations are locked down to windows. its very imortant that buisness phones integrates very well with them if it were to be considered a buisness phones
f*dont you agree that having a buisness friendly is important for the sucess of any phone platform?
g* do you think that the lack of stylus or (resistive lcd) will hinder its ability to do remote desktop? the track ball thingy enough?
Most of the above points (1, 2, 3, 4, 7, 9) will most likely be addressed by developers and sysadmins in good time. In the case of Exchange, even if the platform is opensource, it doesn't mean that a 3rd party company can't license the technology to provide a solution. It might not be pretty (at first), but I wouldn't say it's impossible.
5. It depends on what specific vulnerabilities you're concerned about, whether on the app/run level or somewhere in the core Android stack. In general I doubt there's any issue that doesn't already exist on other mobile OSes, and given their respective solutions, the same is possible here. But if you have a specific concern in mind it would help to point it out.
6, 9. Google is certainly pushing its suite of apps and for good reason (because a lot of consumers use them), but given the open nature of the platform nothing is cemented in place. So while the G1 comes setup for use with gmail/gcal/maps/etc, there's nothing that says a sysadmin can't strip and replace. Moreover, the G1 isn't being pushed as an enterprise device in the first place; there's every possibility that carriers could release other handset models later, preloaded with more business-centric software packages (and less Google apps), and are simply holding off during Android's initial launch. If you think about it, Android has a much better chance of having a strong launch on the consumer front than on the enterprise front. Take care of the former first, then the latter has a better chance of long-term success.
8, g. Same as above, but Google is also pushing the cloud which could lessen the need for VNC/RDP/etc. Sysadmins will have their doubts about security in Google's cloud, but there's nothing that says they can't first observe the model and then later implement their own solution.
10. Not as much of an issue with the software as it is with the carrier. T-mobile isn't just launching Android, it's also launching its 3G network. Providing tethering out-of-the-box could seriously cripple the network in its infancy, and that's the last thing the US 3G market needs. Face it, we need good competition to force carriers to pick up the pace, and in time we could see some competing tethering plans between AT&T, T-mobile, et al.
Some thoughts in general:
Businesses may currently be invested in Windows Mobile for their mobile solutions, but the point isn't to take Android and simply turn it into WinMo -- that would be a wasted opportunity. WinMo users are effectively tied to their PC in one way or another (sync, RDP, svn, tether, etc). Android has the chance to push the cloud (among other innovative models), so that users are no longer dependent on existing workflows. The handset would become just a terminal for accessing the cloud, and transition between terminals would be completely transparent (Android on a phone? How about a netbook?). Not that I expect Android to overtake WinMo (or BES et al), but it gives companies more solutions that better fit their individual needs, and helps MS, RIM, etc start evolving the existing systems that are frankly getting dated.
thanks that was quite insightful
i would like to point out that a big portion (probably the biggest) of the android users only bought the G1 phone because of its great value. think about it the unlocked $399 G1 has more features than the $700 touch diamond. most of these people couldn't care less about what google have in mind for the platform. all they want is for their phone to do certain tasks (like exchange email) a lot of the other google-pushed tasks will probably be unused
I think for you personally, the #1 most important feature the G1 >>needs<< to have is spellcheck
fatso485 said:
...hostiliy...hilighting...buisness...intrested..
Click to expand...
Click to collapse
t mobile is a poor businesses Carrier
most of the big business i have seen use at&t
once tmobile 3g network become more mature they might get some more of the business market. but until they iron out the wrinkles in there new 3g network don't expect anything from tmobile. i don't think you want something like the iphone bill happening to all you business customers.
this is the first step tmobile has taken towards 3g in the US
i am sure there will be some stumbles.
I'm not 100% sure, but I think the Active Sync protocol needed for Exchange support is free to use from Microsoft. I see a LOT of it in many 3rd party email servers and applications. Many of which are in direct competition with Microsoft. So I think we can assume that Active Sync is very doable on the Android platform. Only needs a developer to do something about it.
Active Sync is my main concern too. Once that's in place, then some way to tether I'm getting me an Android phone quickly.
All the other concerns are too easy to fix either already or very soon, so the 2 problems I mentioned are the only show stoppers for me.
There currently isn't even a foolproof activesync drop-in replacement for Linux desktop distros. There's multisync and synCE, but they're both hard to install, hard to configure, and far from perfect in their implementation. As for getting it working under Android, like everything else, it's probably a wait-and-see situation. Most software for Linux isn't written in Java (which Android prefers/requires?) It'll be interesting to see if a java implementation of activesync software could happen.
does any1 know if the g1 has an on screen keyboard
haitiankid4lyf said:
does any1 know if the g1 has an on screen keyboard
Click to expand...
Click to collapse
Currenly, no. The demo and preview vids show that you need to open the hardware keyboard in order to type (except for the phone dialer). But I'm sure SIPs will show up pretty quickly.
fhsieh said:
Currenly, no. The demo and preview vids show that you need to open the hardware keyboard in order to type (except for the phone dialer). But I'm sure SIPs will show up pretty quickly.
Click to expand...
Click to collapse
Yeah, I hope they change that. When I had the Fuze I never liked pulling out the keyboard unless I have to type something long, an email or a long text or whatever. For normal web browsing, entering 1 URL, it's not worth it to slide it open, type and close it again.
my biggest concern is an appointment calender. im so reliant on my appointment calander ion my Kaiser... i wouldnt know what to do without it. Also, a way to sync files would be great. maybe the phone will be integrated with Google Docs? That would be SUPERB! I take notes in my college classes using Office Mobile, but if Android syncs with Google Docs... good lawd.. goodbye to WinMo!
bigdookie said:
my biggest concern is an appointment calender. im so reliant on my appointment calander ion my Kaiser... i wouldnt know what to do without it. Also, a way to sync files would be great. maybe the phone will be integrated with Google Docs? That would be SUPERB! I take notes in my college classes using Office Mobile, but if Android syncs with Google Docs... good lawd.. goodbye to WinMo!
Click to expand...
Click to collapse
Here's a video showing how well it syncs everything.
Say goodbye, WinMo

Connect Android to Enterprise Java Bean

Hi!
Im sorry if this is a dumb question but I googled some stuff about it and never found a straight YES/NO answer.
Im a student in my final year and as a semestral project I have an electronic voting system built on Java Enterprise technology with enterprise java beans (EJBs) running on Glassfish.
For my final work id like to create an app for android that could communicate with those beans on a Glassfish server and thus a people could vote by a cell phone.
My question is Is this even possible? Over the past three days ive been googling stuff concerning this matter but nothing really helped. Id really appreciate a straightforward answer because my time for choosing a final project is almost up and I dont want to end up doing something that is impossible.
Don't take it bad, but it looks like you are a student who doesn't even know what he's working with. Not that it surprises me, but I'm willing to help you.
Answer these straight questions.
1. What is an EJB?
2. Who "runs" an EJB?
3. Where does an EJB "live"?
If and when you answer these three questions you'll know what is needed for a project where "people could vote with a cellphone".
What I can tell you in the most straightforward way is that it is possible for you to have people using their android phones to vote with your Glassfish server.
Android <-> Glassfish
I am looking for the same thing - to write Android apps that communicate with session beans on an app server (i.e. Glassfish). Since I will own both ends of the app, I am looking for a simple approach (e.g. RMI) as opposed to a lot of unnecessary bru-ha-ha (e.g. why turn Java objects into SOAP, just so we can turn them back into the same Java object ... not that Android really supports SOAP).
It looks like Google, for some reason, crippled the Android's ability to communicate. About the only built-in mechanisms I've found are REST (and I don't like REST) or writing my own protocol and using servlets.
Surely, by now, someone has come up with a simple, concise, mechanism for addressing this issue ... I just can't find it.

[Q] Homebrew and the Dell Venue Pro

I searched and got nothing in the forum about homebrew, so i figured i'd ask about it. Is it possible for us with this phone to do any of the homebrew stuff out there? I have been without my laptop so cannot really try anything yet, but I see articles about little apps and aesthetic changes people are doing to their Samsung and HTC wp7 phones and i want in on it too.
I loved that homebrew community when i had my Palm Pre back in the day and had it hacked to my liking. I really hope we can do this with our phones too. I have looked into it a little but, but i don't think the guys who have done the unlocking and developing for wp7 have used, tried or have access to our phone. I really hope I'm wrong and just haven't had any luck searching for answers, but so far i haven't really found anything specifically stating whether anything works on the DVP yet.
If they have, could someone point me in the right direction and i'll continue learning on my own? If not, then i hope we can some day.
Thanks for any help y'all can provide.
I'm looking to attack this problem from the other end. I'm the developer of one of those "little apps" you mentioned; specifically the one that lets you change the Search function in IE (when you hit the Search button or mis-type a URL).
I'm working with a homebrew library that more-or-less handles HTC, Samsung, and LG, but completely doesn't support Dell. I'd like to get it working with Dell so that
A) You all can use my app
B) More homebrew apps can be written for the DVP
Some questions that I have (answers to any are appreciated):
How can I programmatically identify a Dell phone? (On an HTC, you can check for HKLM\Software\HTC in the registry.)
Does anybody have ProvisionXML working on the Venue Pro yet? (This is a really handy way to make changes to the OS.)
Does anybody have a way to get access to the file system, even read-only, on the Venue Pro?
Thanks a bunch. In the meantime (and possibly helpful to this cause) there's a homebrew project called "Functional Webserver" in the WP7 Hacking forum. It should work on Dell phones (I think) and means you should have at least Socket (networking) APIs. It also gives (read-only) access to the \Windows directory, which may be very useful for getting other stuff...
GoodDayToDie said:
I'm looking to attack this problem from the other end. I'm the developer of one of those "little apps" you mentioned; specifically the one that lets you change the Search function in IE (when you hit the Search button or mis-type a URL).
I'm working with a homebrew library that more-or-less handles HTC, Samsung, and LG, but completely doesn't support Dell. I'd like to get it working with Dell so that
A) You all can use my app
B) More homebrew apps can be written for the DVP
Some questions that I have (answers to any are appreciated):
How can I programmatically identify a Dell phone? (On an HTC, you can check for HKLM\Software\HTC in the registry.)
Does anybody have ProvisionXML working on the Venue Pro yet? (This is a really handy way to make changes to the OS.)
Does anybody have a way to get access to the file system, even read-only, on the Venue Pro?
Thanks a bunch. In the meantime (and possibly helpful to this cause) there's a homebrew project called "Functional Webserver" in the WP7 Hacking forum. It should work on Dell phones (I think) and means you should have at least Socket (networking) APIs. It also gives (read-only) access to the \Windows directory, which may be very useful for getting other stuff...
Click to expand...
Click to collapse
I would like to submit my services to help you get that information... However, I'm not really sure how to get that to you. If you'd be happy to lay out directions so I can get you that information, I'll happily do it on my Dell Venue Pro.
Thanks for the help!
@nabiscuit Thanks for the offer. The first step is making sure your phone is developer-unlocked, so you can side-load (install directly, not from Marketplace) XAP application packages. All homebrew apps are distributed in this way. The official way to do this is to have a Microsoft developer account (http://create.msdn.com/) although for the next few weeks ChevronWP7 should also work.
For the first question, try installing a Registry Viewer or Registry Editor app - there are a number of them available, both on this site and on TouchXperience (I like the TouchXperience one a lot). Go poke around for anything that looks like a distinctive registry key or value. The most likely place is under HKLM. You could also just do a registry search (the better apps have at least some capability for such searches) for "Dell" as *anything* with that string is probably distinctive.
For the second, it will take access to native code. Using the "Functional Webserver" app you can download some file from the phone's /Windows directory. Checking them for useful COM exports would be helpful, although I'm not the person to ask about doing that - I can do NT drivers and I can do managed code, but COM is not my thing. Try asking for help with this in the general Windows Phone 7 Development and Hacking forum (http://forum.xda-developers.com/forumdisplay.php?f=606).
For the third question, I could actually whip up a small app that *might* work already. You could also try Advanced Explorer (XDA) or TouchXplorer (TouchXperience) although I don't think either is guaranteed to work outside of HTC phones. If you're willing to try running an app that will check for read and write in a number of harmless parts of the file system, I can code one up for you to run and report results back.
Thanks again!
I'd love to get some homebrew development going, is there anything I can do to help?
Try getting in touch with notebookgrail (http://forum.xda-developers.com/member.php?u=3174632) as he seems to be pulling apart the DVP native libraries and finding lots of cool stuff to do with their COM interfaces. I don't know if he has registry write yet - one of the core functions that a lot of homebrew apps want - but if so I can work on getting it integrated into a nice cross-device library for writing apps which (should... grrr Samsung) work on any phone.
GoodDayToDie said:
Try getting in touch with jessej (http://forum.xda-developers.com/member.php?u=3220709) as he seems to be pulling apart the DVP native libraries and finding lots of cool stuff to do with their COM interfaces. I don't know if he has registry write yet - one of the core functions that a lot of homebrew apps want - but if so I can work on getting it integrated into a nice cross-device library for writing apps which (should... grrr Samsung) work on any phone.
Click to expand...
Click to collapse
Did u mean to point it to me as i was the one who did pull apart the native libs.?
If not, sorry for the intrusion.
Yes, send your request to notebookgrail. I am not on his level for development purposes. But I do appreciate the comment.
Whoops, sorry about that notebookgrail! I must have looked at a response instead of the OP by accident. I've fixed my post above. Thanks a bunch for the work you've done. Any word on registry writing?
any progress?

[IDEA][Q] How can I use an elliptic encryption library usefully

Hello all,
First of all, thank you for reading me, and sorry for my approximative english (sometimes ^^).
I am quite not good at marketing, and so I am asking myself a lot of question. At my university, I was specialized in software security, and I worked for a french computer science laboratory, itself specialized in discovering elliptic curves for asymmetric encryption. So, my internship at this lab was to make an encryption library, using weirstrass curves, instead of the ones that NSA advised to use.
Just for feedback, in encryption, elliptic curves are like the next generation encryption system. For instance, a 521 bits key in elliptic is equivalent to 15360 bits in RSA standard system. It is simply more efficient and less consumptive.
The NSA advised to use 2-3 different curves and give them freely on internet, but it is not without knowing that they can crack it fastly than normal curves. For instance, with Weirstrass curves, a super-computer can take 1 month to decrypt only a 150 characters long message.
So, I come with this next-generation encryption library (except the bugs ^^), but I really do not know how to use it efficiently.
I am currently a Mobile Application Developer, so I thought about mobile applications, in SMS apps, or email apps for instance, but there are plenty of this apps which already exist, and I have just this elliptic thing that gives me an advantage, but I think that average people will not even look at it ! ^^
So, this is it, do you think my ideas could be interesting, or without a real future, since the concurrence is too strong and my advantage not so well-known ?
And another question, in my SMS app idea, could I get for instance the Cyanogenmod SMS app sources, since they are open source, modify them and publish them on my own account, with of course mentions to the creator etc.. ?
Thank you again for reading me.
Regards,
Olivier.
I think this sounds very cool.
the truth is, there usually ten or twenty other apps that do the exact same thing. And your method seems to be a big leap forward.
I think you should go for it.
Thanks for you answer.
That is true that there are plenty applications for the same thing.
My fear is most that "normal" people will not be attracted by the product if they do not even know what it is talking about (it is true that it is very technical and mathematical).
And I forget, as I am french, and the library was initially developed in C++, could I freely and without beeing attacked by Copyright or else reproduct the library and its algorithms (which are public) in JAVA ? (it is more a juridic question though).
And for the CyanogenMod SMS app, do you think I can take the sources and modify them ? I am truly bad at design so it can be a very good step for my app xD
Thank you beforehand.
Regards,
Olivier.

Categories

Resources