Is using a PendingIntent for receiving location updates a security risk?
<p>In Reto Meiers blog post <a href="http://android-developers.blogspot.dk/2011/06/deep-dive-into-location.html" rel="nofollow">A Deep Dive Into Location</a> on the Android Blog, and in his talk, he recommends using a <a href="http://developer.android.com/reference/android/app/PendingIntent.html" rel="nofollow"><code>PendingIntent</code></a> for receiving updates from the <a href="http://developer.android.com/reference/android/location/LocationManager.html" rel="nofollow"><code>LocationManager</code></a>. Since you can't create local-only intent broadcasts(see the <a href="http://developer.android.com/reference/android/support/v4/content/LocalBroadcastManager.html" rel="nofollow"><code>LocalBroadcastManager</code></a>) with a PendingIntent then virtually anybody can send these broadcasts to your application, right? Wouldn't this be a security risk?</p>
