Code Monkey home page Code Monkey logo

Comments (5)

soam1 avatar soam1 commented on September 2, 2024

@grrrrr i would like to pick this up. I hope you assign me this so I could help

from timecop.

12people avatar 12people commented on September 2, 2024

@grrrrr Thanks for the suggestion. However, as you say, it's not a great privacy solution and there are many ways in which it could be circumvented. For example, even in the case of malware that would give an attacker access to your device, the attacker could just as easily gain access to the database associated with the app β€” either via the on-device file or via the "Export" screen.

Also, I think I fail to see the use-case for this, as unlike with password apps or medical apps or even communication apps, the data in Time Cop is unlikely to be particularly sensitive. I guess unless you're doing sensitive government work, but then your whole device should be hardened and blocking screenshots is unlikely to be much of a help. And if you're under a repressive regime and doing activist work, perhaps consider using a codename for your project rather than "Secret Anti-government Project".

At the end of the day, if you're concerned about any of your data leaking, then you need to harden your entire device. Blocking screenshots won't help here.

Let me know if I'm missing some important use-case. For now, I just don't think it's worth the implementation or maintenance effort (especially as this would be Android-only; iOS is not seeing new releases and desktop platforms don't have support for this feature AFAIK) or worth the UI clutter in adding another setting.

from timecop.

grrrrr avatar grrrrr commented on September 2, 2024

@soam1 I think you could just make a pull request and @12people would decide to accept it or not

as unlike with password apps or medical apps or even communication apps, the data in Time Cop is unlikely to be particularly sensitive

@12people a bit as you say, the work (or some of it) is sensitive

For example, even in the case of malware that would give an attacker access to your device, the attacker could just as easily gain access to the database associated with the app β€” either via the on-device file or via the "Export" screen.

This really depends, most malware will either target specific data on a phone when they know what they want or take screenshots to gather a more overall view.

While I am android, it's my understanding that iOS also has the ability to restrict this as of iOS 1411.

Thanks for at least considering and close if it is something not what you want implemented.

from timecop.

12people avatar 12people commented on September 2, 2024

@grrrrr @soam1

If it were up to me, I don't think I would accept this, as I think it adds unnecessary complication without significant enough security advantages.

(As for iOS, the potential might be there, but the iOS release hasn't been updated in years.)

However, I'm just a volunteer maintainer. @hamaluik is the owner of this project and the decision is up to him. He tends to be quite busy nowadays, but if he notices this conversation, he'll have the final say on this.

from timecop.

12people avatar 12people commented on September 2, 2024

BTW, I'd be curious whether malware doesn't generally have ways to go around the flag that disables taking screenshots, as malware tends to have escalated privileges anyway. Is there any evidence of this flag thwarting malware?

from timecop.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    πŸ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. πŸ“ŠπŸ“ˆπŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❀️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.