The Complete Guide to Remote Compose: Native Server-Driven UI (AI Writen)Remote Compose (androidx.compose.remote) is an experimental Jetpack framework that allows you to define UI on a backend and render it natively on Android. Unlike traditional Server-Driven UI (SDUI) thJul 2, 2026·4 min read
Cryptographic failures remain a big flow in mobile. But how much do programs really care?Jul 16, 2025·6 min read
Deep link hijacking and how to avoid themDeep links are a big issue when it comes to Android security. The slightest mistake, like, for example, a typo, could lead to major issues like data leaks or theft. The Android documentation also mentions some general guidelines while writing deep li...Apr 12, 2025·6 min read
Easy Dynamic Analysis for Android with DrozerDynamic analysis is a crucial part of my everyday work, whether it’s for a bug bounty program or a client security audit. In fact, it provides a broader perspective than static analysis. Static analysis helps me understand each feature in isolation, ...Apr 10, 2025·3 min read
Let's hack a Mobile GameGames are probably the number one reason why I became a programmer. Although I have never worked in a game company before, the most intriguing part for me was finding a way to win easily, as I was way too lazy to discipline myself to become a real to...Mar 15, 2025·6 min read
Exploiting the Native Libraries of an Android appThere are many reasons why developers load native code in their Android apps. Some are ex-C++ engineers who feel more comfortable writing low-level code instead of Kotlin or Java. Others rely on legacy libraries written in C++, which require a lot of...Feb 9, 2025·3 min read
The Sneaky Middleman: When Activities Become Your Backdoor to ProvidersIt is not uncommon for content providers to be unexported in inter-process communication (IPC), as the data they manage is often intended to remain internal to the application. One might assume that attempting to interact with such providers would be...Feb 2, 2025·2 min read
Attacking Android WidgetsAlongside Activities, Services, Broadcast Receivers, and Content Providers, Android Widgets also serve as entry points to Android apps, broadening the app’s attack surface even more. The concept of Widgets began with Android 2 and has not significant...Jan 24, 2025·2 min read
