[guardian-dev] Android 4.3 has built-in keylogger support

[Michael Rogers]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 25/07/13 13:56, Tom Ritter wrote:
> On 25 July 2013 07:46, Michael Rogers <michael at briarproject.org>
> wrote:
>> "Starting in Android 4.3, accessibility services can observe and 
>> filter key events, such as to handle keyboard shortcuts or
>> provide navigation parity with gesture-based input. The service
>> receives the events and can process them as needed before they
>> are passed to the system or other installed apps."
> 
> I don't think this is anything you couldn't do before by just
> building your own keyboard and replacing the system one.  Which
> requires double opt-in as Mark mentioned.

Thanks, that's good to know. On a more optimistic note, Android 4.3
also has support for hardware-backed key storage. Does anyone know
which devices, if any, support this?

Cheers,
Michael


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAEBAgAGBQJR8Ss6AAoJEBEET9GfxSfMqEAIAJjspjeVDn+v3UjzrtiYTGby
jhbrUhPFeN0ppvLY7l1ytpfoxrs86kyd8wTBvqW3xeyI4V6ZMczHpFD2wMT00+Df
vm1M4zB1ZzP6jBpr2oBXyJZQsJCFydEmEtDQ3ud1e5aTo3SDCQXVgIDphue/jm19
22o/y7SUotvQmPMP3LXlFI0zqmNyYTrNnmkhzmORDtEIXV/okFtb2VCxSXnNQPU6
Ppgh+P9gOKoGs011ihhY9bxDzqfhGoD234zPMWFKKJJR+KOLXlt1CSiJ6wBb+h25
MG1rnTaJ75hUQyORn7e8g5npjekJmgx6PyAdoarHuRWA9xrhMRC1LLrbh0VwHiE=
=6WnY
-----END PGP SIGNATURE-----