incubator-callback-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Avidan Chen (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CB-49) UUID replacement
Date Wed, 06 Jun 2012 14:13:22 GMT

    [ https://issues.apache.org/jira/browse/CB-49?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13290169#comment-13290169
] 

Avidan Chen commented on CB-49:
-------------------------------

Thank you for taking the time to reply. After further studying this issue, I have another
suggestion:
If the issue here is the bundle identifier, which according to what you're saying is public,
then let's not use it. Let's use a different key to hash the MAC address with, which is not
known to everyone.

What if each application will supply a secret key in JavaScript to Cordova, and Cordova will
take this secret key and hash it together with the device's MAC address? The key could come
from a remote server, it doesn't have to be contained in the application itself.

That way, no one but the developers of the application will be able to identify the user,
as they alone will know the secret key. Moreover, since this "secret key" will not change
as well as the MAC address, the hashed value will be the same whether the user re-installs
the app or updates iOS version, etc.

I really need a way to uniquely identify a device across app reinstallation and device wipe.
Every other implementation I've seen  (mainly OpenUDID and SecureUDID) has stored the generated
unique ID in the Pasteboard which to my understanding is wiped if the user uninstalls the
application.

I've seen this method discussed here : http://techcrunch.com/2012/03/30/appredeem-odid/
However I wasn't able to locate their code (although the article states that their SDK is
open source).
                
> UUID replacement
> ----------------
>
>                 Key: CB-49
>                 URL: https://issues.apache.org/jira/browse/CB-49
>             Project: Apache Cordova
>          Issue Type: Bug
>          Components: iOS
>         Environment: iOS 5
>            Reporter: Shazron Abdullah
>            Assignee: Shazron Abdullah
>            Priority: Blocker
>             Fix For: 1.6.0
>
>
> reported at: https://github.com/phonegap/phonegap-iphone/issues/238
> by: https://github.com/sandstrom
> As you might have read iOS 5 will remove the UDID (http://techcrunch.com/2011/08/19/apple-ios-5-phasing-out-udid/).
> This is an excellent alternative and it would be nice if you would implement something
along these lines to keep the functionality. The idea of hashing together with the bundle
id is great, because it makes it impossible to track across applications, which is what apple
wanted to fix (although it can be circumvented that would only anger them, and tracking across
apps isn't required for most apps anyway).
> https://github.com/gekitz/UIDevice-with-UniqueIdentifier-for-iOS-5

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

Mime
View raw message