A post on Promotion Driven Development yesterday touched on something I really dislike; Rigid Career Levelling. "Level Worthy" is a phrase I feel a lot of managers misuse as a means of pressuring engineers to take on projects. https://www.alsutton.blog/post/what-is-level-worthy/
A few folk pinged me overnight my time (UK) to say "adb backup" addresses only one exfil vector. That's true, but it's a vector I have the most context on. If I wanted to make all #Android exfil harder my temptation would be to require a factory reset when enabling developer mode.
This would follow the model of unlocking the bootloader; If you enable something which reduces the security of the device you have to wipe the users data, but would be a *huge* behaviour change.
Something pointed out to me on T*itter; Apps targeting Android 12, which aren’t declared as debuggable in their manifest, will not have their app data included in an ‘adb backup’ backup.
https://developer.android.com/about/versions/12/behavior-changes-12#adb-backup-restrictions
I've submitted a patch to the #AOSP to take the next step in what was probably, externally, my least popular contribution to #Android while I was at Google. Here's the reason I think it's time to go beyond deprecating `adb backup` and remove it entirely. https://www.alsutton.blog/post/adb-backup-removal/
Selling things like Single Sign On for big identity providers (e.g. Google) as an additional extra comes across, to me, as pretty sleazy given the maintenance overhead should be lower than maintaining your own authentication solution. https://www.atlassian.com/software/access
The official #Mastodon app for iOS is now on the App Store! Get it here:
https://apps.apple.com/us/app/mastodon-for-iphone/id1571998974
Here's the full #AAOS on a Samsung Galaxy Tab #S5e blog post, complete with download links.
https://medium.com/snapp-automotive/android-automotive-os-on-a-tablet-f805beb20f96