security certificate android

0x00 Private Components talking aboutIn Android apps, if a component is exported externally, then this component is an attack surface. There is a good chance that there are many problems because an attacker could test the component in a variety of ways. But developers don't necessarily have all the security issues to consider comprehensively.?The most convenient way to fix this problem is to make sure that

1. Develop smack rules The "zygote" process is created by the INIT process, which is responsible for creating the System Service process "systemserver", "Radio" process and app process. The UID of the "radio" process is 1001. It can call and send text messages. The UID of the "systemserver" process is 1000. It is responsible for creating system service components, and the UID of the address book process is 10000, it can access the address book database. Processes with a uid greater than or equal

the legitimate rights and interests of the end users, safeguard the security of the network and information privacy, promote the healthy and stable development of the domestic Android ecosystem, the experts of "Safety standard technology Group" of Android Green Alliance Android Green Alliance application Experience St

First, prefaceIn the first two cracked articles, we introduced how to use dynamic debugging to crack the APK, one is through debugging Smali source code, one is through debugging so code to carry out the tracing of the crack, then today we on the two article crack method, Take a look at how to develop an application in Android, how to do a layer of security protection of our application, of course, most of

Android UI operations are not thread-safe, and only the main thread can operate the UI. At the same time, the main thread has a certain time limit on UI operations (up to 5 seconds ). To perform some time-consuming operations (such as downloading and opening large files), Android provides some column mechanisms. The articles in the "android basics 02-thread

Guide: This article explains how the system registers the dynamic broadcast and the static broadcast, here mainly notices its registration order This article is mainly for my first two articles Android security Issues (iv) preemptive boot-result article Android security Issues (v.) Preemptive intercept message-resul

Android is designed for most developers to build applications using the default settings without thinking about security. Android also has many built-in security functions in the operating system, greatly reducing the security issues and frequency of applications. Some

(Intent.FLAG_RECEIVER_REGISTERED_ONLY); ……} They have set intent. flag_receiver_registered_only in intent. Therefore, to receive the message, you must register the broadcast receiver dynamically. The same is true for action_screen_off. (This section describes the android security issues. (3) add them to the phishing program) Description of flag_receiver_registered_only Public static final int flag_recei

2014 is a watershed and challenging year for mobile payments. With the development of intelligent terminals, especially the popularity of Apple's ipad, iphone and other products, and the rise of Android open system, the traditional mobile terminal market is being subverted. Mobile phone from a can only call, send text message board brick, gorgeous become our Survival "amulet", we use it to shopping, navigation, friends, transfer, ordering, booking, et

required by the application are reasonable, in most cases, users directly grant the required permissions. Therefore, developers must strictly follow the minimum permission principle when applying for or setting permissions. Automatic Static Analysis and code verification Design a tool for Automatic Analysis of application features, analyze the functions of the application and the differences between different applications to determine its legitimacy. The second type of risk is the vulnerabil

Java.util.zip package to read all the entries in the ZIP package directly, and then check whether the return value of GetName () contains ". /”：5. Reference[1] https://www.jpcert.or.jp/present/2014/20140910android-sc.pdf [2] "Dolphin Browser and mercury browser Remote Code execution vulnerability detailed"http://drops.wooyun.org/mobile/8293[3] technology analysis of the "parasitic Beast" of the Android app that affects the tens of millions of appht

The Android system is based on the Linux kernel, so the Android system not only retains and inherits the Linux operating system security mechanism, but also has unique security features at every level of its system architecture.The original link http://sparkyuan.github.io/2016/04/05/

For more information, see: http://mobile.51cto.com/aprogram-382057.htm Android as an excellent open-source mobile platform, its application scope and attention has become greater and greater. Therefore, security issues have become the focus of the industry and users. How to correctly understand its security problems and adopt corresponding policies to enhance use

Android UI operations are not thread-safe, and only the main thread can operate the UI. At the same time, the main thread has a certain time limit on UI operations (up to 5 seconds ). To perform some time-consuming operations (such as downloading and opening large files), Android provides some column mechanisms. The articles in the "android basics 02-thread

Android security mechanism Introduction Android security mechanisms include the following: • Process sandbox isolation mechanism. • Application signature mechanism. • Permission declaration mechanism. • Access control mechanism. • Process communication mechanism. • Memory management mechanism. • SELinux I. Process sa

Sandbox, process, and permission In Linux, a user ID identifies a given user. on Android, a user ID identifies an application. The application is assigned a user ID during installation. The user ID remains unchanged during the lifetime of the application on the device. Permission is about allowing or restricting applications (rather than users) to access device resources. Android uses the sandbox concept to

In the Android permission permissions and security mechanism resolution (i) blog, I have described in detail the Android related system permission and custom permission, as well as some of the permissions mechanisms and security mechanisms. This blog will mainly introduce the relevant permissions changes, principles an