KML file security in Locus Maps Free

Oops, I thought I was creating a Private ticket, didn't mean to re-post same question....

Hi,

AFAIK, KML generally is not secured in any way against reading its content.

Thanks Michal. I guess what I'm getting at is; if I load a company related kml or kmz file, can it be gotten at somehow externally (ie someone other than myself or whoever else I send the file to to load on their android device)? The file will be loaded into the app as points or tracks. Thanks.

Yes, anybody who is delivered a KML can read its contents provided the file is not encrypted in some third-party software. Then, of course, the receiver must have the same SW and the key to decrypt the file so that it can be imported.

Thank Michal, maybe I was not clear, but that was not what I was asking. I'm talking about hacking or data leak. Can someone externally see or grab a kml file intended for use by only users the file is loaded directly by? I don't want someone not authorized to be able to go see that file or the data in it.

yes anybody can see contents of a KML document - it is not encrypted, see https://en.wikipedia.org/wiki/Keyhole_Markup_Language

Not what I'm asking, thanks.....is it possible for someone to hack into Locus Maps and look at kml files loaded on anyone's device. Or is Locus maps prone to any hacking where someone ca do so. I know, sounds paranoid, but gotta answer this question as I wanted to share a kml file with co-workers, and want to feel it is safe to do so...

"Hack into Locus Map" - Locus is not locked or secured so there's no need to hack anything if anybody wants to read kml files imported to it. If anybody goes into your mobile phone he can freely start Locus and read its data.

Good day guys,

excuse me, just a short note:

- Locus is not secured in any way

- KML/KMZ format is not secured

- your device is secured based on your setup

- same with your email account

So if you do not put your device with Locus or your KML file to hands of other people, I see no reason to worry. Anyway as Michal wrote. Whoever take your device, unlock it or be able to get your SD card with Locus directory on it, there is absolutely no security. That's all. If you worry about your data too much, don't use them on mobile device.

Thanks for your help guys. Here's what happened. I created a kml file with locations, names, and directions. I wanted to distribute to the team so that they have all that info on their device, and be able to use gps and search for locations, all the good things Locus provides! Someone mentioned they were concerned that company info on a free app may be unsafe. Not from someone taking the device, but from some sort of web or online activity, or some sort of back door into Locus, or Locus itself. I have no idea on such things.

So my assumption is, once apps are installed on an android device, they are stand alone, and are not connected or accessible to the app creator or someone else "online"? Or, can, say, someone at Locus access my device and be able to see kml files I have loaded?

Hi, we understand your company's concerns if the information you distribute is sensitive or even confidential. However, the security is not a matter of the apps, it's a matter of the devices. Android devices can be SIM locked or screen locked by a gesture password, number password or newly by a fingerprint password for cases someone handles them unauthorized (eg. in case of theft). But they communicate online via protocols (the same as other common computers use) that can be breached by people who know what they do - fortunately, not everybody knows. So, once the device's communication is hacked by someone who's listening to it, it's probable that he can read your KMLs.

I've forgotten to answer your question - your data in Locus are normally inaccessible for other common people - they are not stored anywhere else except in your own device, not even on our server. We at Locus team do not have access to your personal data as we do not have access to your personal device.

Hi Michal, thank you very much for that, very much appreciated!