Android Security - Application label android AndroidManifest in: allowBackup

AndroidManifest file <application android: allowbackup> main role is to allow a user application to back up data, when the attribute value is set to true, can be performed by the backup and recovery of data and adb restore adb backup

Why do so many phone when we connect data over USB debugging prompt box will pop up risk, that is, taking into account the security risks. Android attribute allowBackup security risks from adb backup tolerate any open USB debugging able to copy the data from the application to the Android phone peripherals, once the application data is backed up all application data can be read by a user; adb restore permit the user specifies a recovery data source (ie, application data backup) to restore the data to create the application. Therefore, when the user's data is backed up, then he can restore this data to another phone or simulator backup. This user is not allowed. So to be safe, be sure developers will allowBackup flag value is set to false to close the application backup and restore functions, so as to avoid information leakage and property damage.

Measures to prevent this risk of a total of two:

1. The system is provided above level8

2. Verify that the current device's IMEI consistent with the previous backup, inconsistent jump to the first page and clear the backup data

Published 41 original articles · won praise 8 · views 20000 +

Guess you like

Origin blog.csdn.net/huma8848888/article/details/95045281