Security and Privacy

TinyWebDB is inherently insecure. It does not require a password to access, which means that anyone in the world can access it. This is a feature, in that it is easy to get a demonstration app running with a simple shared database. However, any data that you put in a TinyWebDB—even if you create your own service—can possibly be read by anyone. Do not put any sensitive information into TinyWebDB, even for a moment. Data that is not “sensitive” is data that you—and your users—wouldn’t mind seeing printed on a billboard by the highway. Anything in TinyWebDB is potentially public. Additionally, anyone can call the erase command in TinyWebDB because that command does not require a password, either. Do not use TinyWebDB for data ...

Get Learning MIT App Inventor: A Hands-On Guide to Building Your Own Android Apps now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.