people of #droidsec

The world's most premier group of Android security researchers.

[Zimperium @Zimperium]

Samsung’s mobile bug bounty program pays up to $200,000 - https://t.co/bp9TjRGXoE

[autoprime @utoprime]

T-Mobile’s LG G5 H830 just received the 2017-07-01 security patch. H83020k 20k ZIPs + IMGs + KDZ and info @ https://t.co/5gJkgFE9nv

[Chris Evans @scarybeasts]

@security_craig It's also a good move to go Google Nexus (now Pixel) -- security updates even more regular than Apple. Non-Google Android = dumpster fire.

[CopperheadOS @CopperheadOS]

https://t.co/c3SqXu635q "Since Magisk is running as root but the SafetyNet checks are not" say hello to TrustZone-based remote attestation.

[Aleph Research @alephsecurity]

#Nexus 9 vs. Malicious Headphones, Take Two (CVE-2017-0648)
#android #vulnerability #mobilesecurity https://t.co/St060mkAyo

[autoprime @utoprime]

LG Vulns and Exposures for June 2017: LVE-SMP-170006, LVE-SMP-170007, LVE-SMP-170008, LVE-SMP-170009, LVE-SMP-170012 https://t.co/SjEqQJkgkL

[@[email protected] @scottyab]

Some tasty new SafetyNet features to Google play services 11 (some deprecations too) https://t.co/fXPQUdhpyo

[Vaibhav Gupta @VaibhavGupta_1]

What's New in #Android #Security (Google I/O '17)
https://t.co/ba7F5xZ0Jt
#AndroidO #IO17

[André Moulu @andremoulu]

Breaking Samsung Galaxy Secure Boot through Download mode on the S5 by @zeewox https://t.co/ucOpbffMYT

[André Moulu @andremoulu]

Subscribers remote geolocation and tracking using 4G VoLTE enabled Android phone by @pat_ventuzelo @ahmanone https://t.co/5QsUY3LZFs

[Aleph Research @alephsecurity]

#initroot: Hello Moto. Exploiting CVE-2016-10277 on Moto G4 & G5 for #Secure #Boot #Bypass
https://t.co/YKV54GwgFQ

[Pau Oliva @pof]

TruSpy: Cache Side-Channel Information Leakage from the Secure World on ARM Devices - [PDF] https://t.co/Iw8TNinEtn

[Jasper van Woudenberg @jzvw]

Alternate description: if you don't use the anti-rollback feature, you don't get anti-rollback. https://t.co/juRIbAsJvq

[Quan @Quanbto]

June bulletin is out: https://t.co/JQrjciCM8n

[autoprime @utoprime]

Another 2-tier Android security patch month. LG seems to only include 1st patch lvl in updates making users wait extra months for full patch

[André Moulu @andremoulu]

Just reported vulns leading to system uid from adb access on Samsung devices. Logic vuln are obviously still a thing in 2017 :)

[Joshua J. Drake @jduck]

Up to $200,000 for Android exploits! https://t.co/SUZAIyUb9N

[Android Police @AndroidPolice]

Android O feature spotlight: Enabling developer options requires your device's passcode https://t.co/Gt5uJmejhi