Windows Phone 7 Application Sandbox Security (User Context, Home Directory etc..) - security

I am trying to understand the Windows Phone 7 application sandbox in detail. So I want to understand things such as:
Does each app. run as its on unique user?
Where is the home (installation. data) directory for each app.?
What are the file system permissions on the application home (installation, data) directory etc.?
I am trying to learn this by writing and running sample code (which prints out the current user, current directory etc.) on the emulator. However, the "Security Critical" and "Trusted application" methods within Silverlight are "turned off" for the windows phone 7 applications.
Following are my questions:
Is there a way to print out the current user name, current directory while running the application within the emulator?
Is there a way to run "security critical" code within an app. in the WP7 emulator? Can I somehow configure in the emulator settings to allow these "security critical" api's or make my application a "trusted application"
Is there any documentation out there that details this sandbox architecture?
I have tried searching but I haven't found any in-depth documentation about the WP7 sandbox architecture which would deal with the above detail I want to understand how WP7 sandbox and security works and is implemented per application.
Thanks,
WinPhone7_Developer

The sandboxing model for applications on the phone means that, 3rd party, applications can't run in the background, can only access IsolatedStorage not a shared file system, and can't directly interact with user data or phone functionality.
Details of the account the application is running as cannot be accessed. You can't even get details of the owner of the phone. The nearest you can get is an anonymized Id of the user of the phone http://msdn.microsoft.com/en-us/library/microsoft.phone.info.userextendedproperties.getvalue(v=vs.92).aspx
No, you can only use APIs in the public SDK.
There is extensive and very good documentation at http://msdn.microsoft.com/en-us/library/ff402535(v=vs.92).aspx
You may be particularly interested in the following sections:
Execution Model for Windows Phone
Isolated Storage for Windows Phone
Security for Windows Phone
In terms of learning about the platform I'd start by learning from the many resources available and which explain what you can do on the phone, rather than attempting to do things you can do on other platforms. (Even ones which are "Windows" platforms.)

Related

Hololens Device Portal Kiosk Mode web api

I am building a tool in which I am using windows device portal wrapper in order to connect and access hololen's device portal.
I would like to be able to get/set kiosk mode from my tool so I dont need to go to device portal and do it manually.
Windows device portal wrapper doesnt give any functionality to access kiosk mode though.
Does anyone know the web api path for this?
Thanks in advance
So since it looks like you're building a tool for converting HoloLens into Kiosks, you need to do this at scale. If you are looking to create a different method of converting your HoloLens into Kiosks, I think you should go provisiong packages.
Provisioning packages will let you make a package you can keep applying to multiple HoloLens. Also some companies don't like enabling developer mode, and this is a method that doesn't have a security risk. Also device portal only allows a single app Kiosk, where as you could create a Multi app Kiosk if you wanted using other methods.
https://learn.microsoft.com/en-us/hololens/hololens-kiosk#set-up-kiosk-mode-using-a-provisioning-package-windows-10-version-1803
Do this help things? I know it's not actually what you were looking for, but hopefully it helps. It it doesn't let me know, I might have a different potential solution.
Kiosk Mode can be set via Device Portal’s REST API by doing a POST to /api/holographic/kioskmode/settings with one required query string parameter (“kioskModeEnabled” with a value of “true” or “false”) and one optional parameter (“startupApp” with a value of a package name). Please keep in mind that Device Portal is intended for developers only and should not be enabled on non-developer devices. The REST API is subject to change in future updates/releases.

How to Manage Deployment/Upgrades for Internal Mobile Application?

I'm creating a UWP application that will be used exclusively on rugged Win10 tablets by a group of initially 10-20. If things go well it will be expanded to 100 users. These users are employees of our company, but will be remotely located.
Currently, with the test tablets, I am pushing the packages in google drive and manually copying them to the tablets, unzipping and executing the ps file on the tablet. This is way to complicated for even a beta test group of our users.
I'm looking for short-term/long-term recommendations for deployment. Someone mentioned SCCM to me and I've read a little, but that seems like quite a major endeavor to host. I would prefer something like a "private store" concept, but I can't find anything like that.
You can create a private store for your company. The best solution is probably to use Windows Store for Business. http://www.microsoft.com/en-us/business-store
Microsoft Azure Active Directory (AD) accounts for your employees are needed if you select this solution.
An alternative way is to use HockeyApp http://hockeyapp.net to deploy your application.
According to your description, HockeyApp should meet your requirement. Via HockeyApp, you can upload and distribute builds for beta or enterprise distribution using our web UI, or our API. HockeyApp also supports build servers like Jenkins or Visual Studio Team Services. Don't forget to upload your dSYM or
mapping.txt to get readable crash reports.
With HockeySDK for UWP integrated, you can also:
Integrate our open-source SDK to:
Collect crash reports
Show update alerts for new beta builds
Add a feedback view directly into your app
For more information, please visit support.hockeyapp.net.

Windows WinJS App System access

I would like to create my own tool to sort photos and videos from anywhere in the file system, sorting and changing names, and stuff like that (basically a sorting tool with custom sort parameters).
Since windows store apps are easy to distribute I think it could be a nice place to develop it.
while I have nothing against C# or VB that i guess it could be easily done with it, I would like to try the HTML/CSS/JS apps of the windows store.
I'm not looking for profit on this, since is aimed for my family.
And I don't really know what kind of access to the file system do these apps have.
I consider a store app because of the universal model, if necessary I could port it to the phones too, the other option I'm considering is just to use ironpython and make it full Desktop.
With UWP apps you don't have the full access to the system files. Of course you get one to the working folder of your app - LocalFolder. By using suitable Capabilities you can be granted an access to specified libraries like: Music, Photos, Videos and more, known as KnownFolders. Additionally you can widely access removable devices. To prevent access violation to work on files in KnownFolders you have to use a special broker, which will grant privileges to your app.
The full list of access permitions you will find at MSDN.

Replace lockscreen app windows universal app 10

I was wondering how would it be possible to dev an app to replace the default lockscreen on windows 10 universal apps. I know that there was some kind of apps in windows 8.0/8.1 but I've never seen this on w10. Is it possible? and how?
(Such as Tetra lockscreen)
If you want to build an app such as "Tetra lockscreen" or "Live Lock Screen Beta", which provide additional functionality directly on the lockscreen, this is not possible as the makers of those apps have additionall access to private APIs normal devs have no access to. Also, both apps aren't available any more as far as I can see, probably the private APIs have been removed with Windows 10.
If you simply want to change the lockscreen picture, this is possible with the UserProfilePersonalizationSettings class which provides the functions TrySetLockScreenImageAsync and TrySetWallpaperImageAsync. With the IsSupported you can check if the Windows device is able to change its lockscreen. On Desktop and Mobile the function currently returns true.

Windows 10 universal app cross app communication availability

I am an WPF developer with little knowledge for the way "mobile" apps work but in general I believe that they work in some sort of sandbox way (meaning they should not be able to access each others process, info etc., I might be totally incorrect on this one). So I am wondering if such "limitations" are applied to the Universal Windows Platform (UWP) apps?
The reasoning for my question is that I would like to write and app that checks if another Universal App is in process and use some of its information. In WPF there are ways of doing just that but in UWP apps I am not sure if it is/should/will be possible.
Thanks.
There are a couple of solutions in Windows 10. Firstly, if you are building an enterprise app and can also side-load normal Desktop apps, you can use this technique to build your UI as a UWP but also be able to break out of the sandbox and do other things on the desktop.
Secondly, if the app you want to read from is cooperative (ie, is designed to provide information; you're not just grabbing it without permission) then you can use App to App services to send and receive information between two consenting applications.
Both links are to //build videos but you can download the slides too that should contain code samples.

Resources