Insecure Data Storage in IoT Smart Lock App

Posted by yann-gael on Saturday November 29, 2025 @07:04PM
from the blog.ptidej.net dept.

( 2 comments | 2 points | on HN )

Re:Insecure Data Storage in IoT Smart Lock App by yann-gael on Saturday November 29, 2025 @07:04PM (#46092083)

This blog examines one specific recurring vulnerability in detail: insecure data storage.

[ Parent | on HN ]

Re:Insecure Data Storage in IoT Smart Lock App by chasing0entropy on Saturday November 29, 2025 @08:30PM (#46092665)

Modern android resolved this by denying access to dmapp data outside of the class sandbox.

Older versions of android are completely vulnerable as they allow user level storage access between apps with user confirmation.

[ Parent | on HN ]