Whoa, what an article! If you consider IT security your thing you have to read the following blog post over at:
http://op-co.de/blog/posts/android_ssl_downgrade/
The author essentially found out that since Android 2.3.4 Google has changed the default cipher suite list to favor the (unsecure) RC4-MD5 first instead of RSA-SHA256.
Posts mit dem Label android werden angezeigt. Alle Posts anzeigen
Posts mit dem Label android werden angezeigt. Alle Posts anzeigen
Dienstag, 15. Oktober 2013
Sonntag, 28. Juli 2013
How to re-root your devices after Android 4.3 OTA
Yay, so you finally got your hands on the just released Android 4.3 on-the-air (OTA) update? Great! But wait ...after upgrading your lovely root permissions are gone and even Super-SU does not work anymore?
This happened to me as well on my beloved Nexus 4, so to quickly remember how to gain root after such an update, do the following:
This happened to me as well on my beloved Nexus 4, so to quickly remember how to gain root after such an update, do the following:
- Make sure you got the latest Android SDK (namely, adb + fastboot) installed
- If wanted: Get the latest ClockworkMod (CWM) recovery for flashing here
- Download the latest SuperSU flashable .zip from here
- Place the SuperSU flashable .zip onto your device's SD-card / -partition
- Connect your device via USB cable to your PC
- Do a adb devices to check if your device is being recognized
- Do a adb reboot bootloader to reboot your device into the bootloader
- Now, do a fastboot flash recovery <path to the CWM recovery .img file> to flash the latest CWM recovery to your device
- Time to reboot the device into CWM by choosing "Recovery" directly on the device's bootloader screen (via the volume +/- buttons, power button to confirm)
- CWM now should boot up. Here you now have to select the SuperSU .zip downloaded and up on the SD-card / -partition from step 4 and flash it.
Samstag, 14. Januar 2012
Mobile (Web) Frameworks in 2012
As I want to do some more development in the mobility sector (that is, for Android in the first place, iPhone comes later, maybe ...) I tried to get an overview of the current status of mobile (web) frameworks in beginning of 2012.
Well, as it sounds that easy -- it really isn't. This seems to be a hot topic all over the place since these frameworks all try (with diferent techniques though) to provide a common interface (API for the techies) to get your application on as much platforms as possible.
This of course also has its drawbacks: While you then can develop your application in pure HTML5 / CSS using regular JavaScript (plus jQuery etc) you cannot access native device feature like the camera or the accelerometer.
If you go for the hybrid approach, that is using a framework which transforms your web application into a native application on Android or iOS, then you finally have access to (some) of the device specific features.
In general (at least for me) it was very hard to get a comprehensive overview of all these frameworks, toolkits and so on since it seems that every day there will be a new one which declares itself being "the ultimate solution (tm)".
Personally I'll give PhoneGap a try which does the hybrid approach mentioned above. With that there are toolkits like Sencha Touch, The M Project or jQuery Mobile which can be used to build your actual application. This especially is nice if you want to provde regular desktop support (for Firefox, Chrome etc) using some node.js server as well. Another nice feature about PhoneGap is that you can write native plugins (for Android that would be in using Java using the Android SDK) which then can be called from the app's JavaScript code. MIT license, nice.
There's another framework called Appcelerator Titanium which does similar things, also for the old-school desktops.
Also consider reading some nice blog articles like Natives are restless, Developers guide to mobile frameworks or several articles over at interfacethis.com.
Oh, and when you need a HTML5 boilerplate, there's a nice template generator over at initializr.com, or, if you need a more mobile approach, take a look at html5boilerplate.com/mobile.
Other (maybe not so well-known) frameworks worth checking out:
http://www.winktoolkit.org/
http://www.knockoutjs.com
http://angularjs.org/
http://www.nimblekit.com/ (iPhone only)
Well, as it sounds that easy -- it really isn't. This seems to be a hot topic all over the place since these frameworks all try (with diferent techniques though) to provide a common interface (API for the techies) to get your application on as much platforms as possible.
This of course also has its drawbacks: While you then can develop your application in pure HTML5 / CSS using regular JavaScript (plus jQuery etc) you cannot access native device feature like the camera or the accelerometer.
If you go for the hybrid approach, that is using a framework which transforms your web application into a native application on Android or iOS, then you finally have access to (some) of the device specific features.
In general (at least for me) it was very hard to get a comprehensive overview of all these frameworks, toolkits and so on since it seems that every day there will be a new one which declares itself being "the ultimate solution (tm)".
Personally I'll give PhoneGap a try which does the hybrid approach mentioned above. With that there are toolkits like Sencha Touch, The M Project or jQuery Mobile which can be used to build your actual application. This especially is nice if you want to provde regular desktop support (for Firefox, Chrome etc) using some node.js server as well. Another nice feature about PhoneGap is that you can write native plugins (for Android that would be in using Java using the Android SDK) which then can be called from the app's JavaScript code. MIT license, nice.
There's another framework called Appcelerator Titanium which does similar things, also for the old-school desktops.
Also consider reading some nice blog articles like Natives are restless, Developers guide to mobile frameworks or several articles over at interfacethis.com.
Oh, and when you need a HTML5 boilerplate, there's a nice template generator over at initializr.com, or, if you need a more mobile approach, take a look at html5boilerplate.com/mobile.
Other (maybe not so well-known) frameworks worth checking out:
http://www.winktoolkit.org/
http://www.knockoutjs.com
http://angularjs.org/
http://www.nimblekit.com/ (iPhone only)
Montag, 7. November 2011
Tired of Google Reader's new design? Try this!
For those of you who are using Google Reader (a web-based RSS-reader with synchronization for your lovely Android phone) and are not that amused about the new Google+-ish design:
Give NewsBlur a try. This Open Source software project isn't that new anymore but still very actively being developed. It features a very nice and slick web-based UI which - now comes the best part - offers a kind of learning feature based on tags and your given likes/dislikes. With that you can filter out stuff content you don't like (*couch* Apple *couch*) and highlight stuff you really care about.
NewsBlur comes in different flavors: A hosted edition which is limited to 64 feeds (too little for me news junkie) or you can host NewsBlur yourself you some Linux near you.
A techie-plus is the open webservice API which can be used to develop own clients for NewsBlur content (see Blar for a first Android client).
Thumbs up for this project!
Give NewsBlur a try. This Open Source software project isn't that new anymore but still very actively being developed. It features a very nice and slick web-based UI which - now comes the best part - offers a kind of learning feature based on tags and your given likes/dislikes. With that you can filter out stuff content you don't like (*couch* Apple *couch*) and highlight stuff you really care about.
NewsBlur comes in different flavors: A hosted edition which is limited to 64 feeds (too little for me news junkie) or you can host NewsBlur yourself you some Linux near you.
A techie-plus is the open webservice API which can be used to develop own clients for NewsBlur content (see Blar for a first Android client).
Thumbs up for this project!
Donnerstag, 11. August 2011
Total Commander for Android!
A dream comes true: Christian Ghisler just released the first beta versions (Beta 10 at the time of writing) of Total Commander 1.0 for Android!
So if you - like me - used Total Commander for ages on your Windows box (still would love a proper Linux / Unix port, but take a look at a former article I wrote called "Sunflower File Manager") you definitly want this on your smartphone / tablet as well.
Besides running as a regular application it also supports rooted devices in order to do / access things you normally wouldn't be able to. The user interface is very well designed so that you can swipe to the left / right for getting to the other part of the split view. For me Total Commander for Android replaces file managers like ES File Manager completely -- looking forward testing the final version of it!
So if you - like me - used Total Commander for ages on your Windows box (still would love a proper Linux / Unix port, but take a look at a former article I wrote called "Sunflower File Manager") you definitly want this on your smartphone / tablet as well.
Besides running as a regular application it also supports rooted devices in order to do / access things you normally wouldn't be able to. The user interface is very well designed so that you can swipe to the left / right for getting to the other part of the split view. For me Total Commander for Android replaces file managers like ES File Manager completely -- looking forward testing the final version of it!
Montag, 18. Juli 2011
WhisperCore and LBE Privacy Guard for Android
You already got an Android smartphone but there are still news popping up about malicious applications hitting the Android Market?
Then it's time to root your phone. Seriously.
"Why should I?" you might ask now? Well, there are two good reasons:
LBE Privacy Guard (https://market.android.com/details?id=com.lbe.security) and WhisperCore (http://www.whispersys.com/whispercore.html),
both free for private usage.
While the first one can be installed on (any?) rooted device and intercepts certain information such as getting your IMEI number, access to your call logs, contacts and such by applications you already installed, the second one (WhisperCore) is an entire custom ROM which even encrypts all your data and brings security to the foreground. WhisperCore is in early beta phase (that is, unfinished!) right now -- anyway, looks very promising to me.
Think of LBE Privacy Guard as some kind of desktop firewall where you can grant or deny rights for your installed applications. If you don't want to let application X to go to the internet, just deny it -- LBE simply will ask you.
Give these both tools a try, it's worth it!
Then it's time to root your phone. Seriously.
"Why should I?" you might ask now? Well, there are two good reasons:
LBE Privacy Guard (https://market.android.com/details?id=com.lbe.security) and WhisperCore (http://www.whispersys.com/whispercore.html),
both free for private usage.
While the first one can be installed on (any?) rooted device and intercepts certain information such as getting your IMEI number, access to your call logs, contacts and such by applications you already installed, the second one (WhisperCore) is an entire custom ROM which even encrypts all your data and brings security to the foreground. WhisperCore is in early beta phase (that is, unfinished!) right now -- anyway, looks very promising to me.
Think of LBE Privacy Guard as some kind of desktop firewall where you can grant or deny rights for your installed applications. If you don't want to let application X to go to the internet, just deny it -- LBE simply will ask you.
Give these both tools a try, it's worth it!
Abonnieren
Posts (Atom)