Top all-time · #9597
Android Explorations
Personal blog · nelenkov.blogspot.comsecurityprogramming
Android Explorations is a personal blog at nelenkov.blogspot.com about security and programming. Since 2012, 8 different Hacker News readers have linked it 8 times. The last post was in 2015, but the archive is still widely read.
Too few sampled comments (5) to say how often HN recommends it.?
Why HN links it
HN readers link Android Explorations for technical write-ups on Android disk encryption, app encryption of stored data, and Google account authentication, including the Cryptfs disk encryption app.
Summarised by Claude from a sample of 5 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
General Android discussion, some focus on Android security. Updates about my WWWJDIC, Kanji Recognzier and Hanzi Recognizer apps.
Most-linked posts?
- /2012/08/changing-androids-disk-encryption.html2 people · 2 mentions · first linked 2013-11-21
What Hacker News says?
> Why can't we encrypt calls and texts in a way which doesn't let all this stuff get read? Like (handwaving) either trust the network and encrypt with a key they provide, or else some form end-to-end encryption (where maybe generating keys is part of what happens when you activate a sim card or something)? We can have E2E encryption on cellphones today, just make calls and send texts over Signal (with other people w…
Comment linking /2013/09/using-sim-card-as-secure-element.html
on “ACLU sues Homeland Security over 'stingray' cell phone surveillance”Submitted Revisiting Android disk encryption as a story · 93 points
HN discussionGoogle's authentication schemes can be incredibly confusing, and they're something I've had to deal with while building an unofficial client to Google Music [0]. Here are two things worth knowing (that are somewhat covered by the article): * aside from OAuth, any method of client auth is basically equivalent to SSO (ie, your entire Google account). As noted in the article, this includes app-specific passwords * SSO…
Comment linking /2012/11/sso-using-account-manager.html
on “Bypassing Google’s Two-Factor Authentication”Submitted Dissecting Lollipop's Smart Lock as a story · 42 points
HN discussionIt requires root, but Cryptfs (available in the play store and f-droid) enables just such a feature. In fact, it's written by this blog post's author. http://nelenkov.blogspot.com/2012/08/changing-androids-disk-... https://play.google.com/store/apps/details?id=org.nick.crypt...
Comment linking /2012/08/changing-androids-disk-encryption.html
on “Revisiting Android disk encryption”Submitted Unlocking Android devices using an OTP via NFC (2014) as a story · 1 points
HN discussionReading this http://nelenkov.blogspot.com/2012/07/using-app-encryption-in... it looks like if you have root on your phone you can still access the APKs. Sounds like it is using the same encryption system as the apps on SD. But have have not had a chance to look at it.
Comment linking /2012/07/using-app-encryption-in-jelly-bean.html
on “Ripping OAuth tokens out of Twitter apps”Yeah, that's a common feature. iPhone has it as well. I'd like to point out that in my next to last paragraph, I state that I want to use Android. I'm not some Apple "fanboy". I believe that setting the disk encryption password separately from the device's is a valid request and the fact that an App has existed for it since Android v3.0 validates that. If you want more of a reason to do so, read this: http://nelenko…
Comment linking /2012/08/changing-androids-disk-encryption.html
on “I tried Android, but couldn't switch. Did you know you can't undo text edits?”