Android Overview for Panasonic

Total Page:16

File Type:pdf, Size:1020Kb

Android Overview for Panasonic Android Overview for Panasonic Marko Gargenta marakana.com © 2011 About Marko Gargenta Founder, Marakana.com. Developer first Android Bootcamp. Instructor for 1,000s of developers on Android at Cisco, Qualcomm, Intel, DoD, etc. Author of Learning Android published by O’Reilly. Now in Chinese and German as well. Speaker at OSCON (3x), ACM, IEEE, SprintDevCon, AnDevCon. Co-Founder of SFAndroid.org Co-Chair of Android Open conference: AndroidOpen.com © 2011 Agenda • Android Then & Now • The Stack • Android at Work • Android Security • Operang System Features • Enterprise Soluons • Case Studies • Dangers, OpportuniBes, Strengths • Plaorm Comparisons This is your class! © 2011 ANDROID THEN & NOW © 2011 Vision for Android Our goal is not just a single device. Our vision is a mobile platform that runs on many many different devices. – Eric Schmidt © 2011 History 2005 Google buys Android, Inc. Work on Dalvik starts 2007 Open Handset Alliance announced Early SoQware Development Kit 2008 HTC G1 Announced SDK 1.0 Released 2009 G2 + 20 other phones released Cupcake, Donut, Éclair 2010 Zillion devices FroYo, Gingerbread, JIT 2011 Games, Tablets, TVs Future? Beyond phones © 2011 Today 45% 40% 35% 30% Android 25% Blackberry Apple iOS 20% Windows Palm 15% Symbian 10% 5% 0% Qtr2 2009 Qtr3 2009 Qtr4 2009 Qtr1 2010 Qtr2 2010 Android grows to 36% of US (Big 4) Smartphone Share, surpassing RIM – and growth will continue to accelerate over time © 2011 Android @Workplace © 2011 Plaorm Versions Version API Level Nickname Android 1.0 1 Android Android 1.1 2 Android Android 1.5 3 Cupcake Android 1.6 4 Donut Android 2.0 5 Éclair Android 2.01 6 Éclair Android 2.1 7 Éclair Android 2.2 8 FroYo Android 2.3 9 Gingerbread Android 2.3.3 10 Gingerbread Android 3.x 11, 12, 13 Honeycomb Android 4.0 14 Ice cream © 2011 Version DistribuBon Source: Android.com © 2011 Historical DistribuBon Source: Android.com © 2011 Add-Ons SenseUI TouchWiz MotoBlur © 2011 HTC Sense Much improved UI. Completely new apps and widgets. Overall different feel: Tasks before Apps. A smart way of innovating on top of Android Open Source project. © 2011 Motorola Motoblur New skin, new apps new widgets. All backed with an online service. Very social-centric. © 2011 Samsung TouchWiz More intuitive home screen, but real crown jewel is Swype. © 2011 “With Google” Devices that have “with Google” add-on feature a set of Google’s proprietary applications, such as Maps, Gmail, Gtalk, and many others. OEMs and carriers typically enter into a licensing agreement with Google in order to distribute Google version of Android. © 2011 Android Fragmentaon? Android Compatibility Test Suite: Defines “Android Compatible” Prevents incompatible releases Provides self testing Fragmentations lines include: - Versions of Android - Add-ons by OEMs/Carriers - Device capabilities Best practices in app development eliminate these issues. CTS ensures compliance. © 2011 Hardware Requirements • Must have a screen of any size. • Must have a soQ keyboard. Hardware keyword is opBonal. • Must support touch screen input • Should have the following sensors: Accelerometer, Magnetometer, GPS, Gyroscope. • Should include WiFi, Bluetooth. Telephony opBonal. © 2011 Hardware Requirements (cont’d) • Should include Near Field Communicaon. • Must have some network capability. • Should have rear-facing camera. Front camera is opBonal. • Memory must be: 125MB+ (system), 150MB+ (user data), 1GB+ (storage) • Must implement USB port. © 2011 FroYo: Speed with JIT • New User Features – Updated Home, Camera, Gallery, Portable hotspot – Support for Exchange (security, remote wipe, calendars, auto-discovery, global addresses) • New Plaorm Technologies – Media (hop/progressive streaming) and Bluetooth • New Developer Services and APIs – Cloud to Device Messaging – Apps on SDCard, media framework, graphics, backup, device manager, UI frameworks © 2011 Gingerbread: Gaming New User Features • Updated user interface • Power management, app control • Download manager for long downloads • Storage manager for private content on sdcard • Improved power management and app control • MulBple camera support • Copy-paste features • Redesigned keyboard © 2011 Gingerbread: Gaming New Developer Features • Performance improvements for gaming • Improved sensor support • Nave acBvity support • Near-Field Communicaon (NFC) • WebM/VP8 playback and AAC encoding • SIP VoIP support • Support for extra-large screen (WXGA++) • Ext4 instead of yaffs file system © 2011 HONEYCOMB © 2011 Honeycomb: Tablets • Honeycomb is Tablet-opBmized Android • As-is will not be supported on mobile phones • Currently two separate paths for Android • Source code likely won’t be available • Will merge in ice cream © 2011 ANDROID @WORK – A GOOGLE PERSPECTIVE © 2011 Security • Protect against loss or theQ • Protect against intercepBon • Employees are the weak link • Enforcement & crypto are key © 2011 Device Management • Onboard the users • Set up security and usage policies • Supporng users • Keep tabs on deployed devices © 2011 App Deployment & Management • Determine key mobile apps • Buy or Build • Distribute apps to devices • Manage updates • Set app usage policies © 2011 More Enterprise Support © 2011 THE MEANING OF OPEN © 2011 Open Source IniBave • Free redistribuBon • Source code • Derived works • Integrity of author’s source code • No discriminaon against person or groups • No discriminaon against field of endeavor • DistribuBon of license • License not specific to product • License must not restrict other soQware • License must be technology neutral © 2011 Andy Rubin: DefiniBon of Open © 2011 Meaning of Open, Jonathan Rosenberg • Open Technology – Open standards – Open source • Open Informaon – Valuable to users – Transparent about informaon – Control: user is in control • Open systems win http://googleblog.blogspot.com/2009/12/meaning-of-open.html © 2011 Open Android, according to Marko Open means:! ⸰ Open Source! ⸰ Open Standards! ⸰ Community Leadership! © 2011 OPEN SOURCE © 2011 Open Source Licenses http://opensource.org/licenses/ © 2011 Openness of The Stack Open, Apache 2 Open, Apache 2 Open, various licenses Dalvik is open, Apache 2 Mostly proprietary or (L)GPL © 2011 What about Honeycomb? No source for Honeycomb. But this seems to be an exception. “Our approach remains unchanged: there are no lock-downs or restrictions against customizing UIs. There are not, and never have been, any efforts to standardize the platform on any single chipset architecture. … As soon as this work is completed, we’ll publish the code. This temporary delay does not represent a change in strategy. We remain firmly committed to providing Android as an open source platform across many device types.” - Andy Rubin © 2011 Android and Linux Android's kernel is separate fork of Linux Linux community rejected Google's changes Linux changes still point of contention © 2011 OPEN STANDARDS © 2011 Android and Open Standards • Use open standards where possible • Leave slots where proprietary is beoer • Create new standards where needed © 2011 Example: Media Support Audio AAC LC/LTP, HE-AACv1 (AAC+), HE- AACv2, AMR-NB, AMR-WB, MP3, MIDI, RTTTL/RTX, Ogg, PCM/WAVE Video H.263, H.264, MPEG-4, VP8 Image JPEG, GIF, PNG, BMP Missing many codecs and native support. Expansion available via Khronos OpenMax IL © 2011 Example: VPN Support Support for VPN built-in: PPTP, L2TP, L2TP/IPSec PSK VPN, L2TP/IPsec CRT VPN But missing key enterprise VPNs, such as Cisco and Juniper. Solution via Raccoon “expansion slot”. © 2011 COMMUNITY LEADERSHIP © 2011 Open Handset Alliance From 34 to 80+ members Includes OEMs, chip vendors, operators, software companies. Still learning to work together. © 2011 Private Roadmap Not a public roadmap. Community input is observed, but no promises are made. This represents a problem for OEMs planning future device releases. © 2011 Bear Hugging Favorite OEM for each release. For G1/Dev1, Nexus One: HTC For Nexus S: Samsung For Xoom: Motorola Different terms for different OEMs? “We’re more like Apple than Microsoft” – Andy Rubin © 2011 Compability Test Suite Android Compatibility Test Suite: Defines “Android Compatible” Prevents incompatible releases Provides self testing Good for users. Good for developers. For Google, a leverage over OEMs. But also a crystal ball into Android’s roadmap. © 2011 WHAT DOES THIS MEAN TO YOU? © 2011 As User I can extensively customize the device.! I can make it “all about me”.! I can even change the flavor of Android.! © 2011 As Developer My app will run on any Android device, regardless of manufacturer.! I can see ins and outs of the platform source code and learn from studying the default apps.! My market is huge.! © 2011 As Manufacturer I may not get the latest code. I get a fully featured OS Nor know what’s coming out for free and can innovate at next. I may be months a higher level. behind competitors. Ugh! © 2011 As Carrier Users love Android!! Who exactly is to support it?! It’s an alternative to iPhone.! Can’t lock down the device – Got many OEMs and and my enterprise customers devices to choose from. what that! © 2011 As Enterprise Many productivity apps.! How do we lock it down?! Users have their own phones How do I create custom ROM?! already. Personals phones inside the company?? © 2011 Overall • Open Source: ★★★ • Most of code is open sourced, but not all • OEMs sBll keep drivers and extensions private • Open Standards: ★★★★ • Whenever license permits, open standards are used • Community Leadership: ★★ • Lack of public roadmap • No early access to code for all
Recommended publications
  • MOTOROLA FLIPSIDE with MOTOBLUR AT&T User's Guide
    MOTOROLA FLIPSIDEIDETM with MOTOBLUR TM User’s Guidee XXXX433a.fm.fm Page 0 Monday, October 4, 2010 10:56 AM XXXX433a.fm.fm Page 1 Monday, October 4, 2010 10:56 AM Your Phone 3.5mm AT&T 3G 11:35 Power / Lisa Jones 10 minuteses agoago Headset My company is sponsoring the grand 9 Sleep AT&T 3G 11:35 Charged Hold= Lisa Jones My company is sponsoring the or new power 10 minutes ago 9 message Press= Volume Text Messaging Market Browser sleep Micro USB ? Connect . charger TextText MessagMe Market Browser or PC Camera Shift Search Delete Menu Search Alternate Press=text New Hold=voice Home Back Line Menu Space Microphone To u ch Pad Scroll/ Back Symbols Select Most of what you need is in the touchscreen and the Tip: Your phone can automatically switch to vibrate keys below it (“Menu, Home, Search, & Back Keys” on mode whenever you place it face-down. To change page 9). this, touch Menu > Settings > Sound & display > Smart Profile: Face Down to Silence Ringer. Note: Your phone might look different. Your Phone 1 XXXX433a.fm.fm Page 2 Monday, October 4, 2010 10:56 AM Contents Device Setup Device Setup . 2 Calls . 4 Assemble & Charge Home Screen . 7 1. Cover off 2. SIM in Keys . 9 3.1 Text Entry . 10 Voice Input & Search . 12 Ringtones & Settings . 12 Synchronize . 13 Contacts . 14 3. Battery in 4. Cover on Social Networking. 17 3.1 Email & Text Messages . 19 Tools. 22 Photos & Videos . 23 Apps & Updates. 26 Location Apps (GPS). 27 5. Charge up 6.
    [Show full text]
  • How Applications Are Run on Android ?
    How applications are run on Android ? Jean-Loup Bogalho & Jérémy Lefaure [email protected] [email protected] Table of contents 1. Dalvik and ART 2. Executable files 3. Memory management 4. Compilation What is Dalvik ? ● Android’s Virtual Machine ● Designed to run on embedded systems ● Register-based (lower memory consumption) ● Run Dalvik Executable (.dex) files What is ART ? ● Android RunTime ● Dalvik’s successor ● ART Is Not a JVM ● Huge performance gain thanks to ahead-of-time (AOT) compilation ● Available in Android 4.4 What is ART ? Executable files Dalvik: .dex files ● Not the same bytecode as classical Java bytecode ● .class files are converted in .dex files at build time ● Optimized for minimal memory footprint Dalvik: .dex files Dalvik: application installation ● Verification: ○ bytecode check (illegal instructions, valid indices,...) ○ checksum on files ● Optimization: ○ method inlining ○ byte swapping and padding ○ static linking ART: OAT file ● Generated during installation (dex2oat) ● ELF format ● Classes metadata Memory management Zygote ● Daemon started at boot time ● Loads and initializes core libraries ● Forks to create new Dalvik instance ● Startup time of new VM is reduced ● Memory layouts are shared across processes Dalvik: memory management ● Memory is garbage collected ● Automatic management avoids programming errors ● Objects are not freed as soon as they become unused Dalvik: memory allocation ● Allocation profiling: ○ allocation count (succeeded or failed) ○ total allocated size (succeeded or failed) ● malloc
    [Show full text]
  • Android (Operating System) 1 Android (Operating System)
    Android (operating system) 1 Android (operating system) Android Home screen displayed by Samsung Nexus S with Google running Android 2.3 "Gingerbread" Company / developer Google Inc., Open Handset Alliance [1] Programmed in C (core), C++ (some third-party libraries), Java (UI) Working state Current [2] Source model Free and open source software (3.0 is currently in closed development) Initial release 21 October 2008 Latest stable release Tablets: [3] 3.0.1 (Honeycomb) Phones: [3] 2.3.3 (Gingerbread) / 24 February 2011 [4] Supported platforms ARM, MIPS, Power, x86 Kernel type Monolithic, modified Linux kernel Default user interface Graphical [5] License Apache 2.0, Linux kernel patches are under GPL v2 Official website [www.android.com www.android.com] Android is a software stack for mobile devices that includes an operating system, middleware and key applications.[6] [7] Google Inc. purchased the initial developer of the software, Android Inc., in 2005.[8] Android's mobile operating system is based on a modified version of the Linux kernel. Google and other members of the Open Handset Alliance collaborated on Android's development and release.[9] [10] The Android Open Source Project (AOSP) is tasked with the maintenance and further development of Android.[11] The Android operating system is the world's best-selling Smartphone platform.[12] [13] Android has a large community of developers writing applications ("apps") that extend the functionality of the devices. There are currently over 150,000 apps available for Android.[14] [15] Android Market is the online app store run by Google, though apps can also be downloaded from third-party sites.
    [Show full text]
  • K1 LEVEL QUESTIONS 17PMC640 ANDROID PROGRAMMING Unit:1
    K1 LEVEL QUESTIONS 17PMC640 ANDROID PROGRAMMING Unit:1 1) Dalvik Virtual Machine (DVM) actually uses core features of A. Windows B. Mac C. Linux D. Contiki 2) A type of service provided by android that allows sharing and publishing of data to other applications is A. View System B. Content Providers C. Activity Manager D. Notifications Manager 3) Android library that provides access to UI pre-built elements such as buttons, lists, views etc. is A. android.text B. android.os C. android.view D. android.webkit 4) A type of service provided by android that shows messages and alerts to user is A. Content Providers B. View System C. Notifications Manager D. Activity Manager 5) A type of service provided by android that controls application lifespan and activity pile is A. Activity Manager B. View System C. Notifications Manager D. Content Providers 6) One of application component, that manages application's background services is called A. Activities B. Broadcast Receivers C. Services D. Content Providers 7) In android studio, callback that is called when activity interaction with user is started is A. onStart B. onStop C. onResume D. onDestroy 8) Tab that can be used to do any task that can be done from DOS window is A. TODO B. messages C. terminal D. comments 9) Broadcast that includes information about battery state, level, etc. is A. android.intent.action.BATTERY_CHANGED B. android.intent.action.BATTERY_LOW C. android.intent.action.BATTERY_OKAY D. android.intent.action.CALL_BUTTON 10) OHA stands for a) Open Host Application b) Open Handset
    [Show full text]
  • Android Operating System
    Software Engineering ISSN: 2229-4007 & ISSN: 2229-4015, Volume 3, Issue 1, 2012, pp.-10-13. Available online at http://www.bioinfo.in/contents.php?id=76 ANDROID OPERATING SYSTEM NIMODIA C. AND DESHMUKH H.R. Babasaheb Naik College of Engineering, Pusad, MS, India. *Corresponding Author: Email- [email protected], [email protected] Received: February 21, 2012; Accepted: March 15, 2012 Abstract- Android is a software stack for mobile devices that includes an operating system, middleware and key applications. Android, an open source mobile device platform based on the Linux operating system. It has application Framework,enhanced graphics, integrated web browser, relational database, media support, LibWebCore web browser, wide variety of connectivity and much more applications. Android relies on Linux version 2.6 for core system services such as security, memory management, process management, network stack, and driver model. Architecture of Android consist of Applications. Linux kernel, libraries, application framework, Android Runtime. All applications are written using the Java programming language. Android mobile phone platform is going to be more secure than Apple’s iPhone or any other device in the long run. Keywords- 3G, Dalvik Virtual Machine, EGPRS, LiMo, Open Handset Alliance, SQLite, WCDMA/HSUPA Citation: Nimodia C. and Deshmukh H.R. (2012) Android Operating System. Software Engineering, ISSN: 2229-4007 & ISSN: 2229-4015, Volume 3, Issue 1, pp.-10-13. Copyright: Copyright©2012 Nimodia C. and Deshmukh H.R. This is an open-access article distributed under the terms of the Creative Commons Attribution License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original author and source are credited.
    [Show full text]
  • Dalvik - Virtual Machine
    Review Indian Journal of Engineering, Volume 1, Number 1, November 2012 REVIEW Indian Journal of 7765 – ngineering 7757 EISSN 2319 E – ISSN 2319 Dalvik - Virtual Machine Ashish Yadav J1, Abhishek Vats J2, Aman Nagpal J3, Avinash Yadav J4 1.Department of Computer Science, Dronacharya college of Engineering, Gurgaon, India, E-mail: [email protected] 2.Department of Computer Science, Dronacharya college of Engineering, Gurgaon, India, E-mail: [email protected] 3.Department of Computer Science, Dronacharya college of Engineering, Gurgaon, India, E-mail: [email protected] 4.Department of Computer Science, Dronacharya college of Engineering, Gurgaon, India, E-mail: [email protected] Received 26 September; accepted 19 October; published online 01 November; printed 16 November 2012 ABSTRACT Android is a software stack for mobile devices that contains an operating system, middleware and key applications. Android is a software platform and operating system for mobile devices based on the Linux operating system and developed by Google and the Open Handset Alliance. It allows developers to Write handle code in a Java-like language that utilizes Google-developed Java libraries, but does not support programs developed in native code. The presentation of the Android platform on 5 November 2007 was announced with the founding of the Open Handset Alliance, a consortium of 34 hardware, software and telecom companies devoted to advancing open standards for mobile devices. When released in 2008, most of the Android platform will be made obtainable under the Apache free-software and open-source license. Open Android provide the permission to access core mobile device functionality through standard API calls.
    [Show full text]
  • Dexmedetomidine Mitigates LPS-Induced Acute Lung Injury in Rats Through HMGB1-Mediated Anti- Inflammatory and Antioxidant Mechanisms
    Revista Argentina de Clínica Psicológica 2020, Vol. XXIX, N°4, 377-383 377 DOI: 10.24205/03276716.2020.837 Dexmedetomidine Mitigates LPS-Induced Acute Lung Injury in Rats Through HMGB1-Mediated Anti- Inflammatory and Antioxidant Mechanisms Ning Lva*,XiaoYun Lib ABSTRACT Purpose: To investigate the effect of dexmedetomidine on lipopolysaccharide (LPS)- induced acute lung injury in rats, and the underlying mechanism. Methods: Healthy male SD rats (n=54) were randomly divided into three groups: normal, model and dexmedetomidine groups, with 18 rats in each group. Rats in the model and dexmedetomidine groups were given LPS at a dose of 8 mg/kg, to establish a model of acute lung injury. Rats in the dexmedetomidine group were injected intraperitoneallywith dexmedetomidine at a dose of 50 μg/kg prior to establishment of the model, while rats in the normal group received intraperitoneal injection of normal saline in place of dexmedetomidine. Hematoxylin and eosin (H&E) staining was used to observe changes in lung tissue in each group.Changes in wet/dry weight ratio of lung tissue were compared among the groups. Enzyme-linked immunosorbent assay was used to determine the expressions of inflammation indices i.e. interleukin-6 (IL-6), tumor necrosis factor-α (TNF- α), and interleukin-1β (L-1β)] in lung tissue. Levels of MDA were measured with thiobarbituric acid method. Superoxide dismutase (SOD) activity was assayed through enzyme rate method, while nitric oxide was measured using nitrate reductase assay.The expression levels of high mobility group protein B1 (HMGB1), p-PI3K, p-Akt, p-IκB, p-NF- κB, and Toll-like receptor 4 (TLR4) in lung tissue were determined with Western blotting.
    [Show full text]
  • Wilker Quiala Cutiño.Pdf
    Universidad Central “Marta Abreu” de Las Villas Facultad de Ingeniería Eléctrica Centro de Estudios de Electrónica y Tecnologías de la Información TRABAJO DE DIPLOMA Diseño de podómetro en dispositivo móvil: el i-Walker Autor: Wilker Quiala Cutiño Tutor: Dr.C. Alberto Taboada Crispi Santa Clara 2013 "Año 55 de la Revolución" Universidad Central “Marta Abreu” de Las Villas Facultad de Ingeniería Eléctrica Centro de Estudios de Electrónica y Tecnologías de la Información TRABAJO DE DIPLOMA Diseño de podómetro en dispositivo móvil: el i-Walker Autor: Wilker Quiala Cutiño e-mail: [email protected] Tutor: Dr.C. Alberto Taboada Crispi PT, IT, CEETI, Fac. Ing. Eléctrica, [email protected] Consultante: Dr.C. Julián L. Cárdenas Barrera PT, CEETI, Fac. Ing. Eléctrica, [email protected] Santa Clara 2013 "Año 55 de la Revolución" Hago constar que el presente trabajo de diploma fue realizado en la Universidad Central ―Marta Abreu‖ de Las Villas como parte de la culminación de estudios de la especialidad de Ingeniería Biomédica, autorizando a que el mismo sea utilizado por la Institución, para los fines que estime conveniente, tanto de forma parcial como total y que además no podrá ser presentado en eventos, ni publicados sin autorización de la Universidad. Firma del Autor Los abajo firmantes certificamos que el presente trabajo ha sido realizado según acuerdo de la dirección de nuestro centro y el mismo cumple con los requisitos que debe tener un trabajo de esta envergadura referido a la temática señalada. Firma del Tutor Firma del Jefe de Departamento donde se defiende el trabajo Firma del Responsable de Información Científico-Técnica i Pensamiento.
    [Show full text]
  • Mobile Code Anti-Reversing Scheme Based on Bytecode Trapping in ART
    sensors Article Mobile Code Anti-Reversing Scheme Based on Bytecode Trapping in ART Geonbae Na 1, Jongsu Lim 1, Sunjun Lee 2 and Jeong Hyun Yi 2,* 1 School of Computer Science and Engineering, Soongsil University, Seoul 06978, Korea; [email protected] (G.N.); [email protected] (J.L.) 2 School of Software, Soongsil University, Seoul 06978, Korea; [email protected] * Correspondence: [email protected] Received: 31 March 2019; Accepted: 6 June 2019; Published: 10 June 2019 Abstract: As interest in Internet of Things environments rapidly increases throughout the IT convergence field, compatibility with mobile devices must be provided to enable personalized services. The security of mobile platforms and applications is critical because security vulnerabilities of mobile devices can be spread to all things in these environments. Android, the leading open mobile platform, has long used the Dalvik virtual machine as its runtime system. However, it has recently been completely replaced by a new runtime system, namely Android Runtime (ART). The change from Android’s Dalvik to ART means that the existing Dalvik bytecode-based application execution structure has been changed to a machine code-based application execution structure. Consequently, a detailed understanding of ART, such as new file formats and execution switching methods between codes, is required from the viewpoint of application security. In this paper, we demonstrate that an existing Dalvik-based application vulnerability can be exploited as-is in ART. This is because existing Dalvik executable files coexist in the ART executable file, and these Dalvik bytecodes and compiled machine codes have one-to-one mapping relationships.
    [Show full text]
  • T-Mobile CLIQ with MOTOBLUR User Guide
    FOCUS ON WHAT MATTERS. MOTOROLA CLIQ™ with MOTOBLUR™ Congratulations More information On your phone—Press Home > My Account. MOTOROLA CLIQ with MOTOBLUR On any phone—Call 1-800-734-5870. MOTOROLA CLIQ with MOTOBLUR is the latest way to stay up to date on the friends and information that On your computer—Go to mean the most to you. Finally, spend less time www.motorola.com/mycliq. managing your life and more time living it. After you create a MOTOBLUR account, you can also • Sync contacts, messages, feeds and updates from log in and find help with today’s most popular social sites MOTOBLUR: www.motorola.com/mymotoblur. • Always backed-up + AGPS for locating your phone + So, whether you want to talk, read, watch, or play, we remote wipe = totally secure can help. • Never be out of contact with a full HTML browser, 3G/HSDPA and even Wi-Fi Caution: Before assembling, charging or using your phone for the first time, please read the Safety, Regulatory, & Legal Information provided with your phone. Once your phone is up and running, press Menu > Settings > About phone > Safety & regulatory to read the full information. Congratulations 1 Your phone When you turn your phone, the home screen adjusts for you. 3.5mm Headset Jack Notification LED On=Charged. 3G 11:35 Flashing=New 298 minutes away from cake. notification. 15 min ago Trevor Gilley Ringer Off Black turtleneck and a 3G 11:35 5 min ago Switch Power Key Vanessa Eskridge 298 minutes away from cake. Ultra secret double-agent Press to put the 15 min ago Volume Keys display to sleep, London Partly Sunny Trevor Gilley or hold to turn 20˚ MarketMarket Browser Black turtleneck and a beret, and off.
    [Show full text]
  • Nacldroid: Native Code Isolation for Android Applications
    NaClDroid: Native Code Isolation for Android Applications Elias Athanasopoulos1, Vasileios P. Kemerlis2, Georgios Portokalidis3, and Angelos D. Keromytis4 1 Vrije Universiteit Amsterdam, The Netherlands [email protected] 2 Brown University, Providence, RI, USA [email protected] 3 Stevens Institute of Technology, Hoboken, NJ, USA [email protected] 4 Columbia University, New York, NY, USA [email protected] Abstract. Android apps frequently incorporate third-party libraries that contain native code; this not only facilitates rapid application develop- ment and distribution, but also provides new ways to generate revenue. As a matter of fact, one in two apps in Google Play are linked with a library providing ad network services. However, linking applications with third-party code can have severe security implications: malicious libraries written in native code can exfiltrate sensitive information from a running app, or completely modify the execution runtime, since all native code is mapped inside the same address space with the execution environment, namely the Dalvik/ART VM. We propose NaClDroid, a framework that addresses these problems, while still allowing apps to include third-party code. NaClDroid prevents malicious native-code libraries from hijacking Android applications using Software Fault Isolation. More specifically, we place all native code in a Native Client sandbox that prevents uncon- strained reads, or writes, inside the process address space. NaClDroid has little overhead; for native code running inside the NaCl sandbox the slowdown is less than 10% on average. Keywords: SFI, NaCl, Android 1 Introduction Android is undoubtedly the most rapidly growing platform for mobile devices, with estimates predicting one billion Android-based smartphones shipping in 2017 [12].
    [Show full text]
  • The Future Going Back in Time to Abuse Android's
    Back To The Future Going Back In Time To Abuse Android’s JIT !1 $ whoami • Benjamin Watson • Director of Security Research @VerSprite Security • Android • @rotlogix !2 Agenda • Inspiration and Overview • Android 4.4.4 JIT Internals & Abuse • Android 7.1.1 JIT Internals & Abuse • Android Oreo • Tools • Future Challenges • Conclusion !3 Back To The Future Going Back In Time To Abuse Android’s JIT !4 Making Android Malware Great The First Time !5 On The Shoulders Of Giants !6 On the Shoulders of Giants @mattifestation @rwincey !7 Shellcode Execution in .NET using MSIL- Based JIT Overwrite • @mattifestation discovered the CPBLK opcode, which is effectively the MSIL equivalent to memcpy • He used to this opcode to overwrite a JIT’ed .NET method with shellcode • https://www.exploit-monday.com/2013/04/ MSILbasedShellcodeExec.html !8 Java Shellcode Execution • @rwincey uses the Unsafe API to overwrite a JIT’ed Java method with shellcode • https://www.slideshare.net/RyanWincey/java- shellcodeoffice !9 On the Shoulders of Giants • After absorbing Matt and Ryan’s research, I was left with one question … “ Is this also possible in Android? “ … !10 Motivation • These techniques discussed today are post-exploitation in nature • We already have installed a malicious application or gain code execution in Java through an arbitrary application • Our goal is to execute shellcode in memory entirely through Java without loading additional shared-libraries, or utilizing JNI !11 Motivation • This means that a simple “application” can have a self- contained solution
    [Show full text]