From 73fa1052cfba3ed1b0435b8e8198529cd510cc49 Mon Sep 17 00:00:00 2001 From: akwizgran Date: Tue, 28 Nov 2023 17:42:44 +0000 Subject: [PATCH] Increase password length for app-sharing hotspot. This makes it impractical for a nearby attacker to brute-force the password in order to inject malware into the download. --- .../org/briarproject/briar/android/hotspot/HotspotManager.java | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/briar-android/src/main/java/org/briarproject/briar/android/hotspot/HotspotManager.java b/briar-android/src/main/java/org/briarproject/briar/android/hotspot/HotspotManager.java index 745c59690..a0b015dbe 100644 --- a/briar-android/src/main/java/org/briarproject/briar/android/hotspot/HotspotManager.java +++ b/briar-android/src/main/java/org/briarproject/briar/android/hotspot/HotspotManager.java @@ -432,7 +432,8 @@ class HotspotManager { @RequiresApi(29) private String getPassword() { - return getRandomString(8); + return getRandomString(4) + "-" + getRandomString(4) + "-" + + getRandomString(4) + "-" + getRandomString(4); } private static String createWifiLoginString(String ssid, String password) {