Search Results

You are right, it is impossible to reliably detect root, especially from a sandboxed app. A rootkit can (i.e. it is not technically impossible) run your app in a specially crafted VM, so that it sees …

A malicious app on rooted device can read any certificate or password you will use to outsmart the enemies. Also in your scenario how will you know that the first request (the one that receives the AP …

You must install netcat on your PC, not on the device. Set this netcat in listening mode for the chosen port: nc -lp 4444 The device will get its netcat by playing the forged video file. You don't …

Amazon Store app actually controls the download and installation process, so it doesn't expose exactly this vulnerability. Note that the Google Play Store does essentially the same. Protection of the …

These don't explicitly mention Android, but there can be no guarantees. …

This could be a phishing attempt. This means, clicking on the links in this event may cause negative effects. But the event itself is harmless; I delete such events from my calendar almost weekly; the …

From your description it seems that for your purposes, a persistent file in your app will be enough. You will get some 'false positives' when users wipe the app data, or uninstall your app and reinsta …

Extended HTTP headers are propagated by your mobile operator, at their discretion, as described in Detect an MSISDN (mobile number) with the browser. They won't work when you are on Wi-Fi, or if you …

Android does have app sandboxing, which is in some aspects stronger, and in other aspects weaker, than iOS. … But if your question refers to end-user's choice to keep their personal data private, then the choice of applications is much more important than the decision whether to use an Android or iOS - powered …

This is true for Android with its JVM (both Dalvik or ART), and for iOS, and for Windows, and even for SmallTalk. … But on Android, the native code, and especially what we usually mean by JNI code - the pieces of home-grown or 3rd party software, written in C++ or some other non-managed language - this code runs in …

Android apps are by definition the entities that may be managed by Application Manager. So if uninstalled, it is really gone. But. Not all apps can be uninstalled. …

When you use Google Play to distribute your app, you declare that you comply with Google's Content Policy, which means that the app is safer for the end users in many ways, including some security res …

If your Android app is written in Java (or Kotlin), and you don't use an obfuscator, the attack is quite easy. … People can even make these changes on the platform level, because your app will be using system networking API, which is open source on Android. You should look for an answer on the protocol level. …

Google is constantly improving security of Play Store. Yet, the malicious actors' motivation is very high, and repackaging is one of the popular techniques among them. As a user, you should check th …

That's true. WhatsApp changes the keys when you switch the device. This also applies to the end-to-end encrypted conversations. But the cloud backup is not encrypted, or at least, not encrypted with t …