OWASP Mobile Security Testing Guide [https://github.com/OWASP/owasp-mstg/blob/master/README.md]
Continue reading QA, testing, debugging, devops in mobile development
Tag: security / crypto
Android – keep secrets right
App security best practices
[https://developer.android.com/topic/security/best-practices]
research of android security [https://tproger.ru/digest/android-security-resources/]
SSL pinning защита мобильного банкинга на android с помощью ssl сертификата [https://www.emaro-ssl.ru/blog/ssl-pinning-for-android/] [pdf]
Безопасность со вкусом Google [https://habr.com/ru/company/redmadrobot/blog/452252/]
Android AES crypto encryption [https://habrahabr.ru/company/rambler-co/blog/279835/] AES/CBC/PKCS5Padding [pdf]
Tampering detection Android [https://www.airpair.com/android/posts/adding-tampering-detection-to-your-android-app]
Continue reading Android – keep secrets right
Mosdroid #6
API, tokens, auth, oauth
Android IPC + gRPC
AIDL (Android Interface Definition Language) и коммуникация между процессами (IPC) [https://habrahabr.ru/post/139432/]