Showing posts with label encryption. Show all posts
Showing posts with label encryption. Show all posts

Wednesday, February 20, 2013

Whiskers v1.2 Submitted to Store

I have submitted version 1.2 of Whiskers to the Windows Phone Store today. It contains the new features and changes I described in an earlier post.


Here's the list of changes:
  • Camera capture support and ability to save the captured photo to an item in Whiskers
  • Lockout timer
  • Landscape orientation support
  • Unlock PIN-pad now contains the period (.) character
  • Updated splash screen
  • Save, Delete, Cancel App Bar buttons re-ordered


new edit photo page
The camera capture support is the big one for this release. When you add or edit an item in Whiskers, you have the option to capture a photo using the camera on your phone and save it with the item.


For this feature I had to use the Camera APIs directly instead of the simple CameraCaptureTask. Thankfully, there's a great sample from MSDN that shows you how to easily use the Camera APIs and get a very functional UI.


The Camera APIs allow you to focus, adjust the flash, and set the resolution. Most phones have additional camera settings, such as Scene settings and special effects, neither of which is available to you when you use the Camera API for Windows Phone 7.x. With Windows Phone 8 you do have some advanced abilities through another API but that isn't an option for me right now since I have one application for both Windows 7 and 8 and I wanted to keep things simple.




image flipped on Nokia 920
I encountered one irksome issue when testing on my Nokia Lumia 920. Photos captured in Portrait orientation are flipped vertically...


Searching the forums, this appears to be a known issue, with a fix, but it may take a long time before this fix becomes public. So to correct this (because it needs some correction ;) was to provide a vertical flip App Bar button to flip the image if its not oriented properly. Thanks to Tim Heurer and his post on "Handling picture orientation in CameraCaptureTask in Windows Phone 7" for some help and some code.











Once you capture an image and save it to your item, a small thumbnail shows up on the item's detail page. Tap on the thumbnail and you will then see it full-screen. Double-tap and it will zoom in to 100% and you can pan left, right, up or down to view the image at 100%.

photo thumbnail
100% zoom
full-screen




lockout settings
The new lockout timer feature is an additional to make Whiskers more convenient to use when you are switching back and forth between Whiskers and another application, like your browser. Until now, each time you open or return to Whiskers (if it was in the background), you would need to enter your PIN to unlock Whiskers. With this new feature now you can control how long Whiskers may stay unlocked until it automatically locks again and requires you to enter your PIN when you open or return to Whiskers.


 There are several options for configuring the lockout time. You can keep it at Always, which is the default and how Whiskers has operated until now. With Always, Whiskers will always lock when you leave Whiskers and either open it again or return to it.



lockout options



The remaining options are 30 seconds, 1 minute, 3 minutes, 5 minutes, 15 minutes, and 30 minutes. Let's say you choose 30 seconds. Now, when you leave or close Whiskers, Whiskers will remain unlocked for another 30 seconds. If you open or return to Whiskers within that 30 seconds, Whisker will open without requiring you to enter your PIN to unlock it. Wait until after 30 seconds and Whiskers will lock and require you to enter your PIN when you open it again or return to it. It's that simple!


I didn't include a Never option with this feature because I felt it would make Whiskers far less secure and would essentially do away with the need for a PIN.




Hopefully this new version will go live within the next week or so, depending on the approval process.

Tuesday, February 12, 2013

Kaspersky's Best Windows Phone Security Apps


I came across this post today on the Kaspersky lab blog where Whiskers has been recognized as one of the best Windows Phone Security Apps. Hooray!


The post lists twenty different security apps and Whiskers made #18 on the list...



It was really kewl to come across this today. I don't have huge download numbers for this app but the feedback I get from people is always great.


When I created Whiskers, I figured it would probably not get very many hits because of the name. You see, the name doesn't have "password", or "locker", or "security", or "encryption" in the name and the Windows Phone Store search mechanism has always been less than desirable when it comes to finding apps using plain old search in the Store. Many people looking for a secure password locker for their WP usually don't come across Whiskers.


There is a reason for the odd name...if your phone is lost or stolen and someone gets access to it, my hope is that Whiskers is not the first app they open to see all of your secrets, passwords, etc. With a name that has "password" in it, I'm sure that acts like a big shiny red button for the curious and down-right evil. With name like "Whiskers", who's gonna look at that? :)

Tuesday, December 27, 2011

Whiskers

I've submitted Whiskers the password keeper to the WP7 Marketplace. I think I began working on this last month sometime, after I finished up TeaMate. This app was far more involved than the previous two. There are a total of 17 pages (views) and close to 2,000 lines of code. The .xap may come in at a scant 351 KB but there are countless hours spent putting this application together.
At first I was going to call this PassMate but coming up with a logo/icon around this proved to be too difficult. Instead, I decided to place shield for an eye-patch on a cat and call it Whiskers instead. Yea, Whiskers may not have anything to do with security and the cat may be mistaken for a pirate-cat, but Whiskers seemed like a good name. The idea for the patch came from our cat, Toby-kat, who has sort of a bum eye. Toby-kat doesn't really have a patch but since he doesn't see too well out of one eye, we seem to think he does.

Whiskers is a pretty straightforward password locker. You create an account, give it some details, and its safely stored until you need it. Accessing your information is pretty fast and easy with all the details available just about in one screen. There's even a recent page which keeps track of what you've been accessing lately and displays those first.

So that's a total of three apps so far. I have many more ideas and some enhancements in mind for the existing apps. I don't have anything planned yet but I think I may take a short break from app-making and get back to some photography.

Hard at Work

I've been hard to work for the past month on my next WP7 app. It's called Whiskers and its a password keeper. I wanted to develop a password keeper that accomplished the following few goals:

        1. Is Simple
        2. Is Secure
The simple part is, well, simple. Metro UI, clean, appropriate iconography, and features that simply "get to the facts, ma'am". What Whiskers does best right now is store your passwords and other important data easily. What is missing are features such as backup, import, export, etc.

The secure part has been a wrestling match. First, I wanted the data to be encrypted securely. I went through several options and iterations of implementations and finally settled on the built-in Data Protection API (DPAPI) in Windows Phone 7. The API safely and securely encrypts any type of data and does so in a way that the data may only be decrypted on the very same device. By using the DPAPI, I don't have to store any key data, salt values, or other private encryption bits that could be sniffed out of my .xap or from Isolated Storage data.

The second part of security is leaving out the need for application permissions such as Data Services. For me, any application, especially one the stores my private data, should have very good reasons for the need to access the Internet. Whiskers does not and this should give anyone confidence that their data isn't being sent and stored someplace out in the ether. Accomplishing this was full of compromises.

The first compromise was leaving out a Mango feature that I thought would be useful and that is pinning a tile to the Start screen. I implemented the ability to pin any one of your secrets to the Start screen. I later pulled this feature because usage of the ShellTile namespace requires the application to have the Data Services permission. Why? Because a ShellTile has a Uri property which means the tile could redirect to a URL somewhere out in the ether. 

Other compromises deal with the whole, import, export, backup and save to the Cloud features that many people ask for. Again, in order to feel that this app is secure and isn't sending your private data somewhere out into the ether, I decided to leave these features out that way I can leave the need to add the Data Services permission to the app. 

In the future, I'm considering a pro or plus version of the app that would enable Data Services and allow you to use the Cloud. This would go against my two primary goals for Whiskers but then again, this would be a different version of the app altogether so I guess that is ok.

I hope to wrap up this first version of Whiskers soon and submit it to the Marketplace. Like my previous apps, I'm going to make this free and free from Ads.