The Sanctuary

Technology => Network (in)Security => Topic started by: SBTlauien on September 21, 2014, 07:55:12 am

Title: Where can I find the signature of my Android OS?
Post by: SBTlauien on September 21, 2014, 07:55:12 am

My friend is making a little Android app that'll save her money by logging into hundreds of accounts back-to-back, and then listing the best one to use to save the most when purchasing a common commodity.

Her app is getting an this error...

Code: [Select]

android.permission.INTERACT_ACROSS_USERS_FULL
Searching around on the internet, she has discovered that her app will need the same signature as the system.  She knows how to add a signature to her app, but where will she find the signature or her phones system?  It's a Samsung S3, by Virgin Mobile.

Title: Re: Where can I find the signature of my Android OS?
Post by: aldra on September 21, 2014, 09:15:03 am

http://stackoverflow.com/questions/19756727/what-do-i-do-about-this-requires-android-permission-interact-across-users-full

"android.permission.INTERACT_ACROSS_USERS_FULL is a signature level permission. Your app will not be able to use it until and unless it has the same signature as the system."

in other words, the signature is generated when the OS ROM is compiled... you can't retrieve it from your existing system; it's not the same as an MD5 hash... more like a private key.

I'd suggest looking for another way to do what you're trying, because I doubt you'll have very much luck circumventing that protection.

Title: Re: Where can I find the signature of my Android OS?
Post by: aldra on September 21, 2014, 09:26:48 am

just skimmed this:

http://developer.android.com/tools/publishing/app-signing.html

signatures are indeed a collection of private keys.

Title: Re: Where can I find the signature of my Android OS?
Post by: -SpectraL on September 21, 2014, 09:39:05 am

You have to get them to sign your APK with their certificate.