View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0009985 | Taler | wallet (Android App) | public | 2025-05-20 05:20 | 2025-08-31 17:09 |
| Reporter | MarcS | Assigned To | avalos | Resolution deadline | |
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | urgent | Severity | major | Reproducibility | always |
| Status | closed | Resolution | fixed | ||
| Product Version | 1.0 | ||||
| Target Version | 1.0 stretch goals | Fixed in Version | 1.0 stretch goals | ||
| Summary | 0009985: NFC chip continues to broadcast after detail view with QR code was dismissed | ||||
| Description | When initiating a P2P send operation, the Android wallet starts sending the talerURI via NFC simultaneously with showing the QR code. But it continues to broadcast via NFC even when the user closes the QR dialog, and even when sending the wallet to the background! Anyone could just steal the sent money by holding their phone near the sender's phone, probably without the sender even noticing. ==> NFC transmission must be stopped when the QR code is dismissed, or the app is going to the background. | ||||
| Tags | No tags attached. | ||||
| commit f1d504e6bba93697091a11bd0a44cc810c4787c3 Author: Iván Ávalos <avalos@disroot.org> Date: Wed May 21 19:04:54 2025 +0200 [wallet] fix NFC from Android to Android and clear p2p URI bug 0009986 bug 0009985 | |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2025-05-20 05:20 | MarcS | New Issue | |
| 2025-05-20 05:20 | MarcS | Status | new => assigned |
| 2025-05-20 05:20 | MarcS | Assigned To | => avalos |
| 2025-05-21 17:07 | avalos | Status | assigned => informing |
| 2025-05-21 17:07 | avalos | Resolution | open => fixed |
| 2025-05-21 17:07 | avalos | Note Added: 0024960 | |
| 2025-06-03 17:52 | Christian Grothoff | Fixed in Version | => 1.0 stretch goals |
| 2025-08-31 17:09 | Christian Grothoff | Status | informing => closed |