[ 
https://issues.apache.org/jira/browse/CB-49?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13290169#comment-13290169
 ] 

Avidan Chen commented on CB-49:
-------------------------------

Thank you for taking the time to reply. After further studying this issue, I 
have another suggestion:
If the issue here is the bundle identifier, which according to what you're 
saying is public, then let's not use it. Let's use a different key to hash the 
MAC address with, which is not known to everyone.

What if each application will supply a secret key in JavaScript to Cordova, and 
Cordova will take this secret key and hash it together with the device's MAC 
address? The key could come from a remote server, it doesn't have to be 
contained in the application itself.

That way, no one but the developers of the application will be able to identify 
the user, as they alone will know the secret key. Moreover, since this "secret 
key" will not change as well as the MAC address, the hashed value will be the 
same whether the user re-installs the app or updates iOS version, etc.

I really need a way to uniquely identify a device across app reinstallation and 
device wipe. Every other implementation I've seen  (mainly OpenUDID and 
SecureUDID) has stored the generated unique ID in the Pasteboard which to my 
understanding is wiped if the user uninstalls the application.

I've seen this method discussed here : 
http://techcrunch.com/2012/03/30/appredeem-odid/
However I wasn't able to locate their code (although the article states that 
their SDK is open source).
                
> UUID replacement
> ----------------
>
>                 Key: CB-49
>                 URL: https://issues.apache.org/jira/browse/CB-49
>             Project: Apache Cordova
>          Issue Type: Bug
>          Components: iOS
>         Environment: iOS 5
>            Reporter: Shazron Abdullah
>            Assignee: Shazron Abdullah
>            Priority: Blocker
>             Fix For: 1.6.0
>
>
> reported at: https://github.com/phonegap/phonegap-iphone/issues/238
> by: https://github.com/sandstrom
> As you might have read iOS 5 will remove the UDID 
> (http://techcrunch.com/2011/08/19/apple-ios-5-phasing-out-udid/).
> This is an excellent alternative and it would be nice if you would implement 
> something along these lines to keep the functionality. The idea of hashing 
> together with the bundle id is great, because it makes it impossible to track 
> across applications, which is what apple wanted to fix (although it can be 
> circumvented that would only anger them, and tracking across apps isn't 
> required for most apps anyway).
> https://github.com/gekitz/UIDevice-with-UniqueIdentifier-for-iOS-5

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira


Reply via email to