code analysis Archives

AppWizard

October 31, 2025

Android 17 Min Mode turns AOD into a live app canvas

Most Android devices now have an always-on display (AOD) feature, which allows users to view the time and notifications without unlocking their phones. Google is developing a new feature called "Min Mode" for Android 17, which will enable apps to integrate with AOD by rendering minimal user interfaces on the low-power display. Min Mode will not replace the traditional AOD but will function as an additional mode, allowing for a full-screen application surface while maintaining low brightness and refresh rates. Apps can activate Min Mode by defining a MinModeActivity in their AndroidManifest and communicating with a MinModeProvider in SystemUI. This feature aims to provide glanceable, battery-efficient experiences for applications that typically drain battery life. Early indications suggest that Google Maps may be the first app to implement Min Mode, with relevant code already identified. The feature is expected to be available in Android 17, as it is currently disabled at the system level and is not anticipated to be included in Android 16 QPR3.

AppWizard

October 25, 2025

OWASP Mobile Top 10 for Android – How AutoSecT Detects Each Risk?

Mobile applications account for 70% of global interactions, with over 6.8 billion smartphone users. In 2023, 40% of data breaches are linked to vulnerabilities in mobile applications. The OWASP Mobile Top 10 outlines critical security risks for mobile apps, including: 1. Improper Credential Usage: Mishandling of passwords and session tokens. 2. Inadequate Supply Chain Security: Risks from unverified third-party components. 3. Insecure Authentication/Authorization: Failures in verifying user identities. 4. Insufficient Input/Output Validation: Lack of checks on incoming and outgoing data. 5. Insecure Communication: Unprotected data during transmission. 6. Inadequate Privacy Controls: Poor safeguards for personal data. 7. Insufficient Binary Protections: Lack of defenses against reverse engineering. 8. Security Misconfiguration: Improperly secured application settings. 9. Insecure Data Storage: Weak protection of sensitive information on devices. 10. Insufficient Cryptography: Use of weak or improperly implemented encryption. AutoSecT, an AI-driven mobile app security testing platform, detects these risks through various methods, including static code analysis, software composition analysis, and dynamic testing. It helps developers identify and mitigate vulnerabilities effectively.