Private Browsing 2.0(webkit.org)

135 points by frizlab 2 years ago | 71 comments

Google removed 2.36M apps from Google Play using AI threat detection(security.googleblog.com)

48 points by isaacfrond 1 year ago | 21 comments

How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos(research.kudelskisecurity.com)

657 points by spiridow 1 year ago | 219 comments

Kudelski Security research post describing how a pull request to CodeRabbit led to remote code execution and write access to about one million repositories.

Goodbye K-9 Mail(cketti.de)

203 points by todsacerdoti 1 year ago | 30 comments

Android Developer Verification: Threat masquerading as protection(f-droid.org)

1630 points by drewfax 3 months ago | 698 comments

F-Droid blog post criticizing Google's Android Developer Verification requirement, framing it as malware-like control over app installation on Android devices.

Open Letter to Google on Mandatory Developer Registration for App Distribution(keepandroidopen.org)

327 points by kaplun 8 months ago | 263 comments

An open letter from civil society groups and tech companies to Google leadership opposing mandatory developer registration for distributing Android apps outside Google Play.