Developer Libraries » Trusted Intents

The always clear spoken Mark Murphy wrote an interesting blog
post¹ & analysis² of custom permissions in Android. Specifically how
the interaction between apps defining custom/signature permissions can
be subverted in subtle ways based on the order of application install.

Might be worth adding as a footnote to Hans' "Improving trust and flexibility
in interactions between Android apps" blog post³ as it mentions custom
permissions as a means to gate access to Activities.

- Daniel

[1] http://commonsware.com/blog/2014/02/12/vulnerabilities-custom-permissions.html
[2] https://github.com/commonsguy/cwac-security/blob/master/PERMS.md
[3] https://guardianproject.info/2014/01/21/improving-trust-and-flexibility-in-interactions-between-android-apps/