The recent discovery of an Android 2.0.1 security flaw got me thinking. I developed a prototype of an app I want to put on the Android Market, it was my first attempt at building a mobile platform application; to protect the information stored in it, the first thing you saw after starting the app was a screen asking you for a password. For months, I used it, storing valuable information within it, and one day, instead of touching the "OK" button to input the password, I touched "Exit". I started the app again, and found out... it did not ask me for the password. Similarly, the Android 2.0.1 flaw is found in a situation we, as developers, do not usually think about.
