Best Practices for Managing Android App Permissions
App permissions safeguard sensitive user data and should only be requested when essential for core functionality. Often, equivalent or superior results can be achieved without accessing protected information by leveraging alternatives like system intents, scoped identifiers, or indirect APIs.
Core Principles for Permission Usage
Request Only ...
Posted on Fri, 18 Sep 2026 16:17:45 +0000 by Gmans
Implementing Device-Based Application Control Strategies for Mobile Device Security
Mobile Device Security Challenges and Countermeasures
The proliferation of mobile devices in enterprise environments has created significant security vulnerabilities. Statistics indicate that over 95% of security incidents originate from mobile endpoints. Consequently, establishing robust Application Control (AC) mechanisms has become critical ...
Posted on Tue, 07 Jul 2026 16:18:59 +0000 by markmax33
Practical Android Device Security Checks: Identifying Enabled Developer Options, ADB Debugging, and Root Access
To protect sensitive app logic or user data, verifying the host Android device’s security configuration is a critical layer of defense. Below are actionable implementations for monitoring three high-risk device states.
Checking for Enabled Developer Options
Modern Android stores developer options toggle state in Settings.Global (deprecated usag ...
Posted on Wed, 17 Jun 2026 17:23:34 +0000 by merck_delmoro
Reverse Engineering a Product Recommendation API in the Dewu Mobile Application
Today's Objective
Collect product recommendation data from the Dewu app home screen
Target application version: 4.74.5
Bypassing Forced Updates
# -*- coding: utf-8 -*-
'''
@IDE : PyCharm
@version : 3.9
@Auth : Security Researcher
@time : 2024/2/25 8:01
@Description: Bypass update dialog in Dewu app
'''
import frida
import sys
rdev = frida.g ...
Posted on Fri, 08 May 2026 11:17:44 +0000 by axo