How does the local Parse database store its data?

Question

Does it use kernel data?

Is the data encrypted in any way? Is there a way that a user could maliciously change it easily?

I am trying to find this answer, since LDB was announced for iOS and did not find any information about it except “it looks like our Android implementation”. If this information is stored in clear text, I cannot store confidential information in it, so I would like to know.

Answer 1

I just created an application that uses a local database, and here is what I found.

Inside the <app sandbox directory>/Library/Private Documents/Parse there is a file called ParseOfflineStore . This is sqlite database. There are 2 tables inside the table ( ParseObjects and Dependencies ), and pinned objects are stored inside ParseObjects .

To answer your questions:

1) No, it does not use CoreData, but it is sqlite (same db database storage as CoreData).

2) No, it is not encrypted. It is in the clear form stored in the ParseObjects table, in the json column as plain json.

It would be relatively trivial for anyone who can connect iExplorer to an application to download, modify, and download a local database. However, if you have a user who can do this, most likely they can proxy your application with Charles anyway; -)