1

These are my questions regarding security in Samsung tizen tv web app.

If somehow we get our hands on app installation file(.wgt) from tizen tv, it can be imported into tizen studio and voila, you have all the source code. Then you can hack any user's account.

  1. How is Samsung providing security against this scenario?
  2. Are there any ways developer can provide security even if somebody gets the source code?
  3. How to store confidential information such as user-id or tokens securely in tizen tv?
  4. Best practices for providing security in Tizen tv web app?
Jai Deves
  • 82
  • 9

2 Answers2

0

If they have just wgt file they can't convert to source code. But if you want to save some tokens, you can change it by some API from your server in your code .I think it's best although if you use in any platform.

Shayan
  • 402
  • 1
  • 4
  • 18
0

My solution for this is - not to put important information into the source code. Treat it the same way you would treat a web-app. I guess it's just fine to have client ids in the source (developers do it all around the globe), but you should acquire all the tokens only through the proper authorization. After you receive them you can store them in the special and secure storage facilities inside Tizen runtime environment (like KeyManager for example).

jayarjo
  • 16,124
  • 24
  • 94
  • 138