AG Security questions
by Hylke Bons
Hey everyone,
I'm looking at http://aerogear.org/download/ and am somewhat confused.
Some questions about the Security part of AeroGear:
1. Is there a reason why OTP are separate libraries, instead of a
namespace on the existing AG libs?
2. What's the difference between "Security Providers" and "Alternative
authentication methods"?
3. Are Hawk and Java-OTP server modules? What about iOS-OTP? That sounds
like another client lib?
I hope I got this right, if not, please enlighten me.
Thanks,
Hylke
10 years, 7 months
[simplepush] Simplepush-dev list created
by JR Conlin
Hi all,
We've (finally) created a simplepush developer / announcement list for
the Mozilla SimplePush service.
I'll still answer here where I can, but folks interested in general
SimplePush discussion are free to move the noise to that list.
https://mail.mozilla.org/listinfo/dev-simplepush
Sorry for the delay in getting this started. Sometimes moving quickly
means that some bits get left behind.
10 years, 7 months
PushApplication has stopped
by vikassahay
09-25 11:36:43.350: D/dalvikvm(1829): Not late-enabling CheckJNI (already on)
09-25 11:36:43.380: E/Trace(1829): error opening trace file: No such file or
directory (2)
09-25 11:36:43.380: W/Trace(1829): Unexpected value from
nativeGetEnabledTags: 0
09-25 11:36:43.380: W/Trace(1829): Unexpected value from
nativeGetEnabledTags: 0
09-25 11:36:43.380: W/Trace(1829): Unexpected value from
nativeGetEnabledTags: 0
09-25 11:36:43.390: W/Trace(1829): Unexpected value from
nativeGetEnabledTags: 0
09-25 11:36:43.390: W/Trace(1829): Unexpected value from
nativeGetEnabledTags: 0
09-25 11:36:43.450: W/Resources(1829): Converting to string:
TypedValue{t=0x12/d=0x0 a=2 r=0x7f050005}
09-25 11:36:43.480: D/AndroidRuntime(1829): Shutting down VM
09-25 11:36:43.480: W/dalvikvm(1829): threadid=1: thread exiting with
uncaught exception (group=0xb2d8c908)
09-25 11:36:43.480: E/AndroidRuntime(1829): FATAL EXCEPTION: main
09-25 11:36:43.480: E/AndroidRuntime(1829): java.lang.RuntimeException:
Unable to start activity
ComponentInfo{com.example.pushapplication/com.example.pushapplication.MainActivity}:
java.lang.ClassCastException: android.app.Application cannot be cast to
com.example.pushapplication.PushApplication
09-25 11:36:43.480: E/AndroidRuntime(1829): at
android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2180)
09-25 11:36:43.480: E/AndroidRuntime(1829): at
android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:2230)
09-25 11:36:43.480: E/AndroidRuntime(1829): at
android.app.ActivityThread.access$600(ActivityThread.java:141)
09-25 11:36:43.480: E/AndroidRuntime(1829): at
android.app.ActivityThread$H.handleMessage(ActivityThread.java:1234)
09-25 11:36:43.480: E/AndroidRuntime(1829): at
android.os.Handler.dispatchMessage(Handler.java:99)
09-25 11:36:43.480: E/AndroidRuntime(1829): at
android.os.Looper.loop(Looper.java:137)
09-25 11:36:43.480: E/AndroidRuntime(1829): at
android.app.ActivityThread.main(ActivityThread.java:5039)
09-25 11:36:43.480: E/AndroidRuntime(1829): at
java.lang.reflect.Method.invokeNative(Native Method)
09-25 11:36:43.480: E/AndroidRuntime(1829): at
java.lang.reflect.Method.invoke(Method.java:511)
09-25 11:36:43.480: E/AndroidRuntime(1829): at
com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:793)
09-25 11:36:43.480: E/AndroidRuntime(1829): at
com.android.internal.os.ZygoteInit.main(ZygoteInit.java:560)
09-25 11:36:43.480: E/AndroidRuntime(1829): at
dalvik.system.NativeStart.main(Native Method)
09-25 11:36:43.480: E/AndroidRuntime(1829): Caused by:
java.lang.ClassCastException: android.app.Application cannot be cast to
com.example.pushapplication.PushApplication
09-25 11:36:43.480: E/AndroidRuntime(1829): at
com.example.pushapplication.MainActivity.onCreate(MainActivity.java:25)
09-25 11:36:43.480: E/AndroidRuntime(1829): at
android.app.Activity.performCreate(Activity.java:5104)
09-25 11:36:43.480: E/AndroidRuntime(1829): at
android.app.Instrumentation.callActivityOnCreate(Instrumentation.java:1080)
09-25 11:36:43.480: E/AndroidRuntime(1829): at
android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2144)
09-25 11:36:43.480: E/AndroidRuntime(1829): ... 11 more
09-25 11:36:56.980: E/Trace(1860): error opening trace file: No such file or
directory (2)
09-25 11:36:56.980: W/Trace(1860): Unexpected value from
nativeGetEnabledTags: 0
09-25 11:36:56.980: W/Trace(1860): Unexpected value from
nativeGetEnabledTags: 0
09-25 11:36:56.980: W/Trace(1860): Unexpected value from
nativeGetEnabledTags: 0
09-25 11:36:57.031: W/Trace(1860): Unexpected value from
nativeGetEnabledTags: 0
09-25 11:36:57.031: W/Trace(1860): Unexpected value from
nativeGetEnabledTags: 0
09-25 11:36:57.171: W/Resources(1860): Converting to string:
TypedValue{t=0x12/d=0x0 a=2 r=0x7f050005}
09-25 11:36:57.211: D/AndroidRuntime(1860): Shutting down VM
09-25 11:36:57.211: W/dalvikvm(1860): threadid=1: thread exiting with
uncaught exception (group=0xb2d8c908)
09-25 11:36:57.211: E/AndroidRuntime(1860): FATAL EXCEPTION: main
09-25 11:36:57.211: E/AndroidRuntime(1860): java.lang.RuntimeException:
Unable to start activity
ComponentInfo{com.example.pushapplication/com.example.pushapplication.MainActivity}:
java.lang.ClassCastException: android.app.Application cannot be cast to
com.example.pushapplication.PushApplication
09-25 11:36:57.211: E/AndroidRuntime(1860): at
android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2180)
09-25 11:36:57.211: E/AndroidRuntime(1860): at
android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:2230)
09-25 11:36:57.211: E/AndroidRuntime(1860): at
android.app.ActivityThread.access$600(ActivityThread.java:141)
09-25 11:36:57.211: E/AndroidRuntime(1860): at
android.app.ActivityThread$H.handleMessage(ActivityThread.java:1234)
09-25 11:36:57.211: E/AndroidRuntime(1860): at
android.os.Handler.dispatchMessage(Handler.java:99)
09-25 11:36:57.211: E/AndroidRuntime(1860): at
android.os.Looper.loop(Looper.java:137)
09-25 11:36:57.211: E/AndroidRuntime(1860): at
android.app.ActivityThread.main(ActivityThread.java:5039)
09-25 11:36:57.211: E/AndroidRuntime(1860): at
java.lang.reflect.Method.invokeNative(Native Method)
09-25 11:36:57.211: E/AndroidRuntime(1860): at
java.lang.reflect.Method.invoke(Method.java:511)
09-25 11:36:57.211: E/AndroidRuntime(1860): at
com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:793)
09-25 11:36:57.211: E/AndroidRuntime(1860): at
com.android.internal.os.ZygoteInit.main(ZygoteInit.java:560)
09-25 11:36:57.211: E/AndroidRuntime(1860): at
dalvik.system.NativeStart.main(Native Method)
09-25 11:36:57.211: E/AndroidRuntime(1860): Caused by:
java.lang.ClassCastException: android.app.Application cannot be cast to
com.example.pushapplication.PushApplication
09-25 11:36:57.211: E/AndroidRuntime(1860): at
com.example.pushapplication.MainActivity.onCreate(MainActivity.java:25)
09-25 11:36:57.211: E/AndroidRuntime(1860): at
android.app.Activity.performCreate(Activity.java:5104)
09-25 11:36:57.211: E/AndroidRuntime(1860): at
android.app.Instrumentation.callActivityOnCreate(Instrumentation.java:1080)
09-25 11:36:57.211: E/AndroidRuntime(1860): at
android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2144)
09-25 11:36:57.211: E/AndroidRuntime(1860): ... 11 more
09-25 11:37:23.743: E/Trace(1895): error opening trace file: No such file or
directory (2)
09-25 11:37:23.743: W/Trace(1895): Unexpected value from
nativeGetEnabledTags: 0
09-25 11:37:23.743: W/Trace(1895): Unexpected value from
nativeGetEnabledTags: 0
09-25 11:37:23.743: W/Trace(1895): Unexpected value from
nativeGetEnabledTags: 0
09-25 11:37:23.791: W/Trace(1895): Unexpected value from
nativeGetEnabledTags: 0
09-25 11:37:23.791: W/Trace(1895): Unexpected value from
nativeGetEnabledTags: 0
09-25 11:37:23.901: W/Resources(1895): Converting to string:
TypedValue{t=0x12/d=0x0 a=2 r=0x7f050005}
09-25 11:37:23.901: D/AndroidRuntime(1895): Shutting down VM
09-25 11:37:23.901: W/dalvikvm(1895): threadid=1: thread exiting with
uncaught exception (group=0xb2d8c908)
09-25 11:37:23.901: E/AndroidRuntime(1895): FATAL EXCEPTION: main
09-25 11:37:23.901: E/AndroidRuntime(1895): java.lang.RuntimeException:
Unable to start activity
ComponentInfo{com.example.pushapplication/com.example.pushapplication.MainActivity}:
java.lang.ClassCastException: android.app.Application cannot be cast to
com.example.pushapplication.PushApplication
09-25 11:37:23.901: E/AndroidRuntime(1895): at
android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2180)
09-25 11:37:23.901: E/AndroidRuntime(1895): at
android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:2230)
09-25 11:37:23.901: E/AndroidRuntime(1895): at
android.app.ActivityThread.access$600(ActivityThread.java:141)
09-25 11:37:23.901: E/AndroidRuntime(1895): at
android.app.ActivityThread$H.handleMessage(ActivityThread.java:1234)
09-25 11:37:23.901: E/AndroidRuntime(1895): at
android.os.Handler.dispatchMessage(Handler.java:99)
09-25 11:37:23.901: E/AndroidRuntime(1895): at
android.os.Looper.loop(Looper.java:137)
09-25 11:37:23.901: E/AndroidRuntime(1895): at
android.app.ActivityThread.main(ActivityThread.java:5039)
09-25 11:37:23.901: E/AndroidRuntime(1895): at
java.lang.reflect.Method.invokeNative(Native Method)
09-25 11:37:23.901: E/AndroidRuntime(1895): at
java.lang.reflect.Method.invoke(Method.java:511)
09-25 11:37:23.901: E/AndroidRuntime(1895): at
com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:793)
09-25 11:37:23.901: E/AndroidRuntime(1895): at
com.android.internal.os.ZygoteInit.main(ZygoteInit.java:560)
09-25 11:37:23.901: E/AndroidRuntime(1895): at
dalvik.system.NativeStart.main(Native Method)
09-25 11:37:23.901: E/AndroidRuntime(1895): Caused by:
java.lang.ClassCastException: android.app.Application cannot be cast to
com.example.pushapplication.PushApplication
09-25 11:37:23.901: E/AndroidRuntime(1895): at
com.example.pushapplication.MainActivity.onCreate(MainActivity.java:25)
09-25 11:37:23.901: E/AndroidRuntime(1895): at
android.app.Activity.performCreate(Activity.java:5104)
09-25 11:37:23.901: E/AndroidRuntime(1895): at
android.app.Instrumentation.callActivityOnCreate(Instrumentation.java:1080)
09-25 11:37:23.901: E/AndroidRuntime(1895): at
android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2144)
09-25 11:37:23.901: E/AndroidRuntime(1895): ... 11 more
any body please help me i am trying to configure push app in android app it
is configred but message is not coming on console some body help me
urjent!!!
--
View this message in context: http://aerogear-dev.1069024.n5.nabble.com/PushApplication-has-stopped-tp4...
Sent from the aerogear-dev mailing list archive at Nabble.com.
10 years, 7 months
JavaScript Crypto
by Bruno Oliveira
Good morning slackland, following with the plan I started a simple draft
for JavaScript (https://github.com/abstractj/cryptoparty-js) we have
several alternatives outside there the most popular are Crypto-js
(https://code.google.com/p/crypto-js/) and the Stanford crypto library
(http://crypto.stanford.edu/sjcl/).
Before I finish the whole implementation I have some questions:
- Currently crypto-js doesn't have support for GCM or ECC, but sjcl has.
That's the reason why my choice was sjcl instead of crypto-js, but if
you have another good alternative, let me know.
- Create wrappers or not? If you read the unit tests at first glance (at
least for me) looks like is too much. Most part of developers are
looking for security by default. My idea is not to hide the library, but
provide a simple interface like:
Crypto crypto = new Crypto;
ciphertext = crypto. encrypt("blah");
crypto.decrypt(ciphertext);
Advanced users looking for another kind of algorithm/implementation or
whatever would still be able to make use of the plain and straight
crypto library.
- What is the best way to package this library? Bower?
Thoughts?
--
abstractj
10 years, 7 months
One Time Password Cordova
by Erik Jan de Wit
One Time Password
I've checked in the cordova otp module it now supports Android and iOS, I've added a dependency on the barcode scanner plugin so that it is a complete package. There is one general generate method that will check if there is a secret stored if not it will fire up the barcode scanner to scan a secret and then store it. There are also separate methods that support these functions.
On the android side I use SharedPreferences and for iOS NSUserDefaults to store the secret. Currently the project is under my own name don't know how to move it.
As this is a security thing it would be great if others would take a look at because we want to be extra sure there is no obvious security hole in this.
Cheers, Erik Jan
10 years, 7 months
PushApplication has stopped
by vikassahay
09-23 13:25:08.128: I/Process(2055): Sending signal. PID: 2055 SIG: 9
09-23 13:25:59.158: E/Trace(2101): error opening trace file: No such file or
directory (2)
09-23 13:25:59.158: W/Trace(2101): Unexpected value from
nativeGetEnabledTags: 0
09-23 13:25:59.158: W/Trace(2101): Unexpected value from
nativeGetEnabledTags: 0
09-23 13:25:59.158: W/Trace(2101): Unexpected value from
nativeGetEnabledTags: 0
09-23 13:25:59.179: W/Trace(2101): Unexpected value from
nativeGetEnabledTags: 0
09-23 13:25:59.179: W/Trace(2101): Unexpected value from
nativeGetEnabledTags: 0
09-23 13:25:59.239: W/Resources(2101): Converting to string:
TypedValue{t=0x12/d=0x0 a=2 r=0x7f050005}
09-23 13:25:59.239: D/AndroidRuntime(2101): Shutting down VM
09-23 13:25:59.249: W/dalvikvm(2101): threadid=1: thread exiting with
uncaught exception (group=0xb2def908)
09-23 13:25:59.249: E/AndroidRuntime(2101): FATAL EXCEPTION: main
09-23 13:25:59.249: E/AndroidRuntime(2101): java.lang.RuntimeException:
Unable to start activity
ComponentInfo{com.example.pushapplication/com.example.pushapplication.MainActivity}:
java.lang.ClassCastException: android.app.Application cannot be cast to
com.example.pushapplication.PushApplication
09-23 13:25:59.249: E/AndroidRuntime(2101): at
android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2180)
09-23 13:25:59.249: E/AndroidRuntime(2101): at
android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:2230)
09-23 13:25:59.249: E/AndroidRuntime(2101): at
android.app.ActivityThread.access$600(ActivityThread.java:141)
09-23 13:25:59.249: E/AndroidRuntime(2101): at
android.app.ActivityThread$H.handleMessage(ActivityThread.java:1234)
09-23 13:25:59.249: E/AndroidRuntime(2101): at
android.os.Handler.dispatchMessage(Handler.java:99)
09-23 13:25:59.249: E/AndroidRuntime(2101): at
android.os.Looper.loop(Looper.java:137)
09-23 13:25:59.249: E/AndroidRuntime(2101): at
android.app.ActivityThread.main(ActivityThread.java:5039)
09-23 13:25:59.249: E/AndroidRuntime(2101): at
java.lang.reflect.Method.invokeNative(Native Method)
09-23 13:25:59.249: E/AndroidRuntime(2101): at
java.lang.reflect.Method.invoke(Method.java:511)
09-23 13:25:59.249: E/AndroidRuntime(2101): at
com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:793)
09-23 13:25:59.249: E/AndroidRuntime(2101): at
com.android.internal.os.ZygoteInit.main(ZygoteInit.java:560)
09-23 13:25:59.249: E/AndroidRuntime(2101): at
dalvik.system.NativeStart.main(Native Method)
09-23 13:25:59.249: E/AndroidRuntime(2101): Caused by:
java.lang.ClassCastException: android.app.Application cannot be cast to
com.example.pushapplication.PushApplication
09-23 13:25:59.249: E/AndroidRuntime(2101): at
com.example.pushapplication.MainActivity.onCreate(MainActivity.java:22)
09-23 13:25:59.249: E/AndroidRuntime(2101): at
android.app.Activity.performCreate(Activity.java:5104)
09-23 13:25:59.249: E/AndroidRuntime(2101): at
android.app.Instrumentation.callActivityOnCreate(Instrumentation.java:1080)
09-23 13:25:59.249: E/AndroidRuntime(2101): at
android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2144)
09-23 13:25:59.249: E/AndroidRuntime(2101): ... 11 more
--
View this message in context: http://aerogear-dev.1069024.n5.nabble.com/PushApplication-has-stopped-tp4...
Sent from the aerogear-dev mailing list archive at Nabble.com.
10 years, 7 months
[simplepush] Proposed change to Ping response
by JR Conlin
Hi all,
We got a rather late request from a partner that changes how Ping
responses act.
While the spec says that a ping response is arbitrary and it's
recommended that the server reply with "{}", a partner is requesting
that this be the only response from a server for a Ping.
The partner has client deployed code, which is the only reason we're
entertaining the change.
Would this change be a significant impact to your server, testing or
operations?
Thanks!
10 years, 7 months
