'%3e%3cpath%20d='M138%2095.6436V147H0V0H138V51.3564H59.3526V95.6436H138Z'%20fill='white'/%3e%3cpath%20d='M208%200V147H150V0H208Z'%20fill='white'/%3e%3cpath%20d='M361%200V51.4292H321.377V147H261.731V51.4292H220V0H361Z'%20fill='white'/%3e%3cpath%20d='M512%200V51.4292H472.939V147H414.139V51.4292H373V0H512Z'%20fill='white'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_1_12'%3e%3crect%20width='512'%20height='147'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
WRITING
Breaking down Can I Trust That? findings
What the code shows
- security
- android
- ios
- reverse-engineering
Can we trust Mova AI Vacuum Cleaner?
I monitored device setup flow, scanning the room, the map, AI features, voice commands on both the vacuum cleaner and on the iOS app. The product respects user privacy better than most but it could have been better. Default dangerous features are off with a consent screen for each. But when enabled, that data goes to cloud, including video stream and photo of the objects. And what does the app say? Tik Tak Tik Tak. Ad SDKs bundled, data shared and attribution is sent. ... read more
Filip Luchianenco9 min read- security
- ios
- android
- reverse-engineering
Reverse engineering and decrypting the Temu app on iOS and Android
I decompiled the Temu app on both platforms. On Android it erases all ten of its own native libraries from the file security scanners read, rewrites its own Java methods under a server flag, and seals its telemetry with a home-grown cipher that has no extractable key. Here is the code, and what it means for the phone in your pocket. ... read more
Filip Luchianenco27 min read- security
- android
- reverse-engineering
- privacy
Reverse engineering the Trump Accounts Android app (Robinhood wrapper)
I decompiled the Google Play “Trump Accounts” app, listed under U.S. Department of the Treasury. It's a Robinhood wrapper compiled as an internal “Golden Eagle” flavor. ... read more
Filip Luchianenco10 min read