Collaborate Disseminate
Posted by Nataliya Stanetsky, Android Security and Privacy Team
The App Defense Alliance (ADA), an industry-leading collaboration launched by Google in 2019 dedicated to ensuring the safety of the app ecosystem, is taking a major step forward. We are… Continue reading Evolving the App Defense Alliance
Posted by Chrome Security team
Improving the interoperability of web services is an important and worthy goal. We believe that it should be easier for people to maintain and control their digital identities. And we appreciate that policymakers workin… Continue reading Qualified certificates with qualified risks
Posted by Nataliya Stanetsky, Android Security and Privacy Team
Keeping Google Play safe for users and developers remains a top priority for Google. As users increasingly prioritize their digital privacy and security, we continue to invest in our Dat… Continue reading More ways for users to identify independently security tested apps on Google Play
Posted by Steve Kafka, Group Product Manager and Roman Kirillov, Senior Engineering Manager
Mobile devices have supercharged our modern lives, helping us do everything from purchasing goods in store and paying bills online to storing financial data,… Continue reading Enhanced Google Play Protect real-time scanning for app installs
Posted by Andrew Walbran, Android Rust Team
Last year we wrote about how moving native code in Android from C++ to Rust has resulted in fewer security vulnerabilities. Most of the components we mentioned then were system services in userspace (runni… Continue reading Bare-metal Rust in Android
Posted by Eugene Liderman and Roger Piqueras Jover
SMS texting is frozen in time.
People still use and rely on trillions of SMS texts each year to exchange messages with friends, share family photos, and copy two-factor authentication codes to acc… Continue reading SMS Security & Privacy Gaps Make It Clear Users Need a Messaging Upgrade
Posted by Martin Geisler, Android team
Android 14 is the third major Android release with Rust support. We are already seeing a number of benefits:
Productivity: Developers quickly feel productive writing Rust. They report important indicators of… Continue reading Scaling Rust Adoption Through Training
Posted by Hamzeh Zawawy and Jon Bottarini, Android Security
Fuzzing is an effective technique for finding software vulnerabilities. Over the past few years Android has been focused on improving the effectiveness, scope, and convenience of fuzzing acr… Continue reading Android Goes All-in on Fuzzing
Posted by David Adrian, Joe DeBlasio and Carlos Joan Rafael Ibarra Lopez, Chrome Security
Chrome 106 added support for enforcing key pins on Android by default, bringing Android to parity with Chrome on desktop platforms. But what is key pinning anyw… Continue reading Making Chrome more secure by bringing Key Pinning to Android
Posted by Amy Ressler, Chrome Security Team
To get security fixes to you faster, starting now in Chrome 116, Chrome is shipping weekly Stable channel updates.
Chrome ships a new milestone release every four weeks. In between those major releases, w… Continue reading An update on Chrome Security updates – shipping security fixes to you faster