Revisiting Stealthy Sensitive Information Collection from Android Apps
summary
This work claims modern Android privacy controls miss many channels and builds a low-level detector that uses hooking String constructors and ART runtime hooks to catch sensitive identifiers before they leave the device. Evaluation inspects ~1,200 GitHub repos and OEM builds, finds roughly half expose data, reproduces WebView permission bypass that grants camera/audio/location without user prompts, and shows OEM persistent IDs survive factory reset. The detector runs on test devices and flags previously reported leaks.
AI-written summary · about
chapters (6)
- 0:00Android privacy vulnerabilities
- 13:57Permission bypass via WebView
- 21:03Advertisement identifier risks
- 25:10Detecting data leaks
- 33:50Key takeaways
- 35:36Q&A
related talks
37mHey, You, Get off My Private Data: Do Apps Respect Your Privacy as They Claim?
40mSecurity: The Hidden Cost of Android Stalkerware
29mSecuring Android Applications - The not so se…
22mA Mirage of Safety: Bug Finding & Exploit Techniques of Top Android Vendor's Privacy Protection Apps
48mSecuring the System: A Deep Dive into Reversing Android Pre-Installed Apps
25mSimple Spyware: Android's Invisible Foreground Services and How to (Ab)use Them
43mSecurity in Android Applications
21mDeveloping privacy user-centric apps