Security isn't a linear scale where something is "more" or "less" secure. Security vulnerabilities can arise from all directions, whether it is a network based attack, a hardware based attack, freezing the ram and stealing it, physical attacks on the user, all kinds of things are possible. Security isn't just about the patches or updates you install.

As for whether my app being less secure, if your choice of app encrypts a file twice and that translates to being the app "more" secure, then, yes my app is "less" secure, just like locking a door with a padlock and locking the padlock again with another padlock is "more" secure than locking the door with just a single padlock.

Surely, there are some things that definitely need to be encrypted such as contents of a password manager and device keys, but my app is meant for people who just want a file manager where the files are not globally accessible by other apps, because your phone is mostly the apps you use and apps do have a possibility to collect metadata of the files stored in common, globally available directories (not accusing anyone here, just quoting a possibility).

But if we look on the other side, a lot of people would give up security because it's not convenient and easy to use, a lot of people don't use a password manager (which they should btw). Giving them one more password to remember will drive them away from making a choice that favours the privacy of their data.

Coming to cryfs, on their website, they literally have a page where they are pointing out the problems with other even more tested and proven applications like Veracrypt Link to the article, according to this article, every other product is good but their product is better (that's marketing 101).

At last, I would suggest that, please don't think of security as just a code and software thing, and apps aren't just made for tech-savvy people. In fact, it is the duty of the tech savvy to make tech easier for other people.

How is the app better than droidfs? #8

Description

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

Issue actions