How to get imei in native code using C and C++ and without use of JAVA and JNI.

[Dharmendra Carpenter]

Hi,

How to get imei in native code using C and C++ and without use of
TelephoneManger API and JNI Functions. Can anyone help me on this?

Thanks
Dharmendra

[Glenn Kasten]

I'm curious why you can't use JNI, as that is the standard way to access
APIs that don't have an NDK equivalent.

Post by Dharmendra Carpenter
Hi,
How to get imei in native code using C and C++ and without use of
TelephoneManger API and JNI Functions. Can anyone help me on this?
Thanks
Dharmendra

[Dharmendra Carpenter]

Thanks!! Glenn Kasten,

Definitely we can use JNI but one of the security cerfication provider
company wants us to get imei using native C. They thinks that imei can be
compromised using Java and JNI. Hecker can be altered the fuction returned
value.

-Dharmendra

Post by Glenn Kasten
I'm curious why you can't use JNI, as that is the standard way to access
APIs that don't have an NDK equivalent.

Post by Dharmendra Carpenter
Hi,
How to get imei in native code using C and C++ and without use of
TelephoneManger API and JNI Functions. Can anyone help me on this?
Thanks
Dharmendra

--
You received this message because you are subscribed to the Google Groups
"android-ndk" group.
To unsubscribe from this group and stop receiving emails from it, send an
Visit this group at https://groups.google.com/group/android-ndk.
To view this discussion on the web visit
https://groups.google.com/d/msgid/android-ndk/b43c9778-34d9-480b-a614-8bb8f295d658%40googlegroups.com
<https://groups.google.com/d/msgid/android-ndk/b43c9778-34d9-480b-a614-8bb8f295d658%40googlegroups.com?utm_medium=email&utm_source=footer>
.
For more options, visit https://groups.google.com/d/optout.

[Dharmendra Carpenter]

Thanks!! Glenn Kasten

We can use JNI but one of the security audit companies has recommended to get IMEI using native C/C++. They think that IMEI can be compromised while trying to retrieve it using Java and JNI

[mic _]

If you're worried about IMEI being spoofed you may want to look into ID
attestation which is supported on some devices running Android 8.0 and
later:
https://source.android.com/security/keystore/attestation#id-attestation
Note that you'll need a server if you want to perform the validation in a
secure manner.

/Michael

On Tue, Apr 24, 2018 at 8:23 PM, Dharmendra Carpenter <

Post by Dharmendra Carpenter
Thanks!! Glenn Kasten
We can use JNI but one of the security audit companies has recommended to
get IMEI using native C/C++. They think that IMEI can be compromised while
trying to retrieve it using Java and JNI
--
You received this message because you are subscribed to the Google Groups
"android-ndk" group.
To unsubscribe from this group and stop receiving emails from it, send an
Visit this group at https://groups.google.com/group/android-ndk.
To view this discussion on the web visit https://groups.google.com/d/
msgid/android-ndk/c5f18abf-dea4-4289-b744-77ce761b75fb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Alex Cohn]

Post by Dharmendra Carpenter
Thanks!! Glenn Kasten
We can use JNI but one of the security audit companies has recommended to
get IMEI using native C/C++. They think that IMEI can be compromised while
trying to retrieve it using Java and JNI

This security audit company wants you to use some hacks that can be more
dangerous than IMEI being compromised while trying to retrieve it using
Java. At any rate, there is no way to protect your function that reads IMEI
from changed IMEI (consciously by the user or as a result of hacker attack).

Best regards,
Alex Cohn