qdeconinck / lln-campus Goto Github PK

By defaut, SharedPreferences are encoded as plaintext and values can be easily retrieved on rooted devices. This is a security hazard given the fact that these credentials are used by students to authenticate to every services provided by the university. Consider using https://github.com/scottyab/secure-preferences which provide a transparent way to manipulate shared preferences in an encrypted way.

Another solution would be to ask the user to enter his credentials every time you need to get his courses list (on update). As users enter their credentials every day to connect to the university services, I don't think that entering them on this app once or twice every 4 months will be an issue :)

There are comments in French and others in English. It should be better if all comments are in English.