我的书签
添加书签
移除书签Understand Secure Deletion of Data
Details
On Android, calling file.delete() will not securely erase the target file, and as long as it is not overwritten it can be carved from a physical image of the device. Traditional approaches to wipe a file generally do not work on mobile devices due to the aggressive management of the NAND Flash memory.
Remediation
Operate under the assumption that any data written to a device can be recovered. In some instances, encryption might add an additional layer of protection.
The following is not recommended for most applications, but it may be possible to delete a file and overwrite all available space with a large file (which would force the NAND Flash to erase all unallocated space). Drawbacks of this technique include wearing out the NAND Flash, causing the app and the entire device to respond slowly, and significant power consumption.
Wherever possible, avoid storing sensitive data on the device. See [BPXX Avoid storing sensitive data].
Encrypting the sensitive data stored in files, rewriting the contents of the file and syncing before deleting can help, but as described above, they’re not fully reliable solutions to the problem.
