Search posts, papers, and topics
The authors of the open‑source project mobile‑use discovered that Google’s Artemis repository contains large blocks of identical Python code, examples, and even the same agent name without any attribution. They document the exact file diffs, the removal of their names via a force‑push, and the omission of their benchmark results from a public leaderboard. The post argues that this violates Apache…
Flock ALPR cameras run on severely outdated Android 8.1 and Linux 3.18, missing years of security patches. Analysis of leaked firmware revealed hard-coded API keys and plaintext Auth0 credentials, allowing access to Flock's backend for any camera given its MAC address.
Hackers removed a Flock license‑plate reader camera, copied its storage, extracted an on‑device encryption key, and released ~1.6 M images and logs covering 21 days of operation. Analysis shows the device captures ~28 images per vehicle, detects people, and stores raw media in unencrypted partitions. License‑plate detection runs on the cloud, and the camera’s software can mis‑identify graphics as…
ZuckOff is a free mobile app that scans for Bluetooth signatures of Meta smart glasses and notifies you when they are in range. It can’t detect recording activity, but it gives a simple way to spot nearby glasses.
ZuckOff is a mobile app that passively scans for Bluetooth advertisements from camera‑glasses (Ray‑Ban Meta, Oakley Meta, Snap Spectacles, etc.) and notifies the user when such devices are nearby. It logs all BLE devices, lets users whitelist known glasses, offers iOS widgets and Live Activity alerts, and can export logs as CSV. The app is free, has no account, and is marketed alongside merch.
Android 17 QPR1 is the first Android release since 3.x to introduce new APIs without an AOSP update. The APIs are currently limited to Pixel devices and not yet exposed to other OEMs.
A short opinion piece complaining that Google Play’s app review now often exceeds a week, blaming AI‑generated submissions and urging Google to prioritize long‑standing Android apps.
Minimal Phone 2 is a compact smartphone with a physical keyboard, a minimalist OS, and optional de‑Googled firmware. The page is a marketing spec sheet with no engineering details or evaluation.
CodeName One prepared for Android 17 (API 37) by addressing platform changes proactively, including fixing version number parsing and implementing the new system-rendered location button. They also added robust PEM key parsing and explicit task removal to simplify common security operations for app developers.
Android Bench 2.0 adds a set of long‑horizon tasks (multi‑day Android development problems) and introduces agent‑based evaluation. Scoring is now continuous, with the best model achieving a 28 % pass rate on these tasks, far lower than the ~91 % on earlier short tasks. The post lists new models on the leaderboard and points to updated methodology and GitHub repo.
Google's ADK for Kotlin 1.0 is a production-ready framework for building AI agents across Kotlin, Android, and JVM applications. It achieves feature parity with Python ADK, offering idiomatic Kotlin APIs for orchestration, tools, and memory, alongside new Android-specific on-device and hybrid AI capabilities.
AndroidX Security State (v1.1.0) and Security State Provider (v1.0.0) expose per‑component security patch levels (DSPL, PSPL, ASPL) for system, system modules, and kernel, letting apps and MDMs make context‑aware decisions and letting OEMs publish update availability via a standardized IPC.
Codename One adds an invitation API that preserves a unique code through the install process on Android (via Play Install Referrer) and iOS (via App Clip) into the analytics stack. Create an Invite, register a listener at startup, and set a few build hints to get exact attribution without fingerprinting.
Codename One 8.0 adds two user‑experience primitives: **Cross‑Device Continuity** (state checkpointing + Apple Handoff + custom HTTP relay) and **Native Drag‑and‑Drop** (OS‑level drag using the same ClipboardContent model). The post shows the API (StateProvider, Continuity.checkpoint, NativeDragOperation), platform support tables, and practical advice on payload size, security, thread handling, a…
Codename One adds a permission‑free `ContactPicker` API that uses the Android 17 system contact picker and iOS `CNContactPickerViewController` to let apps request only the specific fields (name, phone, etc.) they need. The picker returns a snapshot `Contact` object without granting broad address‑book access, and the API gracefully falls back on older platforms or unsupported cases.
Codename One added a daily automated scan of Apple and Google deprecation notices, linking each notice to concrete builder artifacts before work is created. The system caught the Android 16 back‑gesture change and enabled a permission‑free ContactPicker, turning policy shifts into repeatable, evidence‑backed patches.
Codename One’s new builder pipeline can automatically generate the native plumbing required for VoIP call integration, managed VPN profiles, and packet‑tunnel extensions on iOS and Android. By inspecting which Java packages an app imports, the builder adds the necessary frameworks, entitlements, services, and even a separate signed Network Extension for iOS, letting developers keep their signalin…
Codename One moved 87 common build hints into Java annotations, so misspelled keys or wrong value types cause compile‑time errors instead of silent build‑server ignores. The annotations are processed back into the existing string protocol, keeping backward compatibility while improving validation and IDE support.
Codename One 6.5 adds full watch‑face support: surface declarations now generate Apple Watch WidgetKit extensions and Wear OS complication data sources plus ProtoLayout Tiles. A phone‑side `Surfaces.publish()` mirrors descriptors to the watch via WatchConnectivity/Data Layer. Android builds now emit both a phone APK and a Wear‑only APK (or a standalone watch APK). WatchOS build failures were fixe…
Codename One introduces three new packages—ranging, companion, and transport—to expose UWB distance/direction, user‑approved device association, and local payload exchange on Android and iOS. The APIs require capability checks, BLE token handshakes, and handle platform limits such as missing cross‑ecosystem transport.
Codename One adds a read‑only DocumentProvider API that lets apps publish a virtual file tree to iOS Files and Android’s storage picker. The tree is defined with `DocumentNode` objects, can include remote‑only entries, and is shared via an App Group container. The iOS extension runs in a separate process, so the model is serialized and read independently; Android uses the same model inside the ap…
Codename One adds @AppIntent annotations that let a static Java method be exposed as a Siri, Spotlight, or Android shortcut. The build‑time processor generates native declarations, a reflection‑free dispatch table, and validates the intent metadata. Handlers can be headless, accept typed parameters, return results, and be invoked internally via Intents.invoke(). Entities enable system‑driven disa…
Codename One adds tapjacking protection to its Android runtime. It detects fully or partially obscured MotionEvents, offers four policies (OFF, REPORT, BLOCK, STRICT), can block the entire gesture, and on Android 12+ can request the system hide overlay windows. The API is exposed via `DeviceIntegrity.setTapjackingProtection` and a listener for state changes. iOS has no overlay threat, so the feat…
Codename One now lets you build an Apple Watch or Wear OS companion app from a single codebase by specifying a watchMain class and optional watchStandalone flag. The new WearableConnection API offers putData, sendMessage, and transferFile primitives for asynchronous phone‑watch communication, with simulator support for both platforms.
App Shield moves device‑integrity checks from the client to the server by obtaining a short‑lived ES256 attestation token from Apple App Attest or Google Play Integrity, verified by Codename One’s service, and required by the backend for protected API calls.
The article shows how to regenerate only the BuildConfig.java file in an Android project using the `generateDebugBuildConfig` Gradle task instead of running a full `assembleDebug`. In the Firefox monorepo you can invoke it with `./mach gradle :fenix:generateDebugBuildConfig`, saving build time during testing.
The post demonstrates Kotlin’s vararg parameter by defining a total function that sums any number of Int arguments, showing that total(2,4,6,8) prints 20. It’s a quick intro for Kotlin beginners.
Microsoft announced a set of UI‑level tweaks to its Family Safety product: faster approval flows for screen‑time, app, and purchase requests; expanded app coverage in activity reports; and corrected balance display after top‑ups. The changes are shipped in the latest iOS/Android apps and the web portal, with a call for more feedback.
A short Kodebits tip introduces Kotlin’s Elvis operator for handling nullable values, showing how it supplies a default when the left side is null. It’s a quick reminder for Android developers working with null‑safety.
