For a project of mine, I'm intending to store userdata on the user's machine; "registration" consists of a random ID being generated and used as the primary key in a database that's stored locally. (This is some obscenely large number, say 512 bits long and random, so that there's no chance of a collision. IDK.) Then, whenever it encounters another user (peer-to-peer) it stores the current user's data on their system. Oh, let's assume it's encrypted because it's good enough right?
Each time the user wants to "login", they just "login" using their username and their password. Their username is really just the file name on their system; they enter the wrong username, they can't find the file. The password is used to encrypt the userdata; without it, it cannot be decrypted. To prevent tampering outside of the application, a hardcoded salt would be added.
Oh, and every time a user encounters another user, if they have data that the current user does not, they concatenate the records from their system. If the user's current data does not match the other user's local copy, the user's data is given priority and the other user's system's records are updated (e.g. a password change, etc.).
Discovering other users involves polling a server for a list of all the connected users around them. This happens only once per application open, and should not take too much bandwidth.
The reason I'm going to all this trouble is because I'm cheap and don't want to fiddle with servers, not even home "use your laptop as a server" servers.
Did I mention, this is targeted towards android, and I know nothing about i) databases (except some 11th grade grunt work in ms access) ii) security (-at least i'm not rolling my own encryption hah-) iii) android iv) java (well, I do know it, but haven't practiced it in quite a long long while)?
So my question is this:
- How long before I give up?
jk, I have to finish or at least attempt it...it's not-mandatory mandatory :(
Is this feasible? (I realize I'm biting off way fuckin' more than I can chew here but all the same...someone tell me why I should not try this)
It's for a university side-project ("side" because it's not a part of the syllabus yet, and "mandatory" because I'd be shameless if I didn't do anything for it seeing as I'd volunteered for it and all) so IDK if I'd have to have a mod delete this post sooner or later (probably not, seeing as i] nobody knows Newgrounds there, ii] this account isn't tied to me IRL...yet... and iii] they didn't say that asking others for help is banned; indeed, it was encouraged) but in any case, even if I'm just being a tad paranoid about it,
-pls_quote_this_part_only_if_replying_to_above-
At 9/3/16 12:18 AM, egg82 wrote:
Oh, Amazon- never change :)
Looks like I found my new little malware toy. I'll need to write a new keylogger, though, sadly as my old one died with my HDD :(
Why don't you just download one? I'm sure there are dozens of russian hackers just waiting to help you :P