
UpdatedMay 17, 2024
PublishedApr 20, 2022
Packagecom.adamtai.android.secrets
MD5bcd75542014b6a43a7525c4446572ac8
SHA1 (signer)08:8E:22:34:E5:04:20:63:84:7A:2F:7B:24:12:28:A5:46:FD:DB:B1
Signed byCN=adamtaiapps, O=adamtaiapps, L=Santa Clara, ST=California, C=US
Malware scanTRUSTED
Contact[email protected]
What's new
Updated to new Android Notification permission requirement.
Description
Replacement to Secure Words and Pictures (which doesn't seem to run correctly on my new Android 6 phone).
Instead of updating the old program to work with Android 6, I've decided to just write a new one because the old App has a difficult-to-fix security issue (because it was designed into the system) where it writes updates to an encrypted file using the same cipher key with different IV. This potentially gives an attacker multiple versions of ciphertext that are all encrypted using the same key and with nearly same content (e.g. if you update your bank account file by adding a new account at the end, the entire file is the same except for the end). This is a security risk given that Android storage uses wear leveling and likely keeps deleted files very long. (If you are on the old App, you can use its clean-the-storage function; it is expensive and will cut the life of your storage.)
Frankly, I don't think anybody is using the old App besides myself; BUT if you are and decide to upgrade to this new App. You need to a PC-based program to help migrate your existing data. Also, the new program does not support pictures so your old pictures will not migrate. I'll keep this PC-based program for a few weeks, so please let me know if you need it by end of this year.
Instead of updating the old program to work with Android 6, I've decided to just write a new one because the old App has a difficult-to-fix security issue (because it was designed into the system) where it writes updates to an encrypted file using the same cipher key with different IV. This potentially gives an attacker multiple versions of ciphertext that are all encrypted using the same key and with nearly same content (e.g. if you update your bank account file by adding a new account at the end, the entire file is the same except for the end). This is a security risk given that Android storage uses wear leveling and likely keeps deleted files very long. (If you are on the old App, you can use its clean-the-storage function; it is expensive and will cut the life of your storage.)
Frankly, I don't think anybody is using the old App besides myself; BUT if you are and decide to upgrade to this new App. You need to a PC-based program to help migrate your existing data. Also, the new program does not support pictures so your old pictures will not migrate. I'll keep this PC-based program for a few weeks, so please let me know if you need it by end of this year.
Required features
- Faketouch android.hardware.faketouch
Permissions (3)
Secrets requests the following Android permissions:
- Foreground Service android.permission.FOREGROUND_SERVICE
- Post Notifications android.permission.POST_NOTIFICATIONS
- Com Adamtai Android Secrets Dynamic Receiver Not Exported Permission com.adamtai.android.secrets.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION