Pinned Tweet
๐คซ We all have secrets, and some are certainly better kept that way!
In my latest blog post, I discuss how to keep your app's secrets, just that - a secret
sp4ghetticode.medium.com/redโฆ
#AndroidDev #MobileSec
Ed Holloway-George ๐ retweeted
Grab a front row seat to #AndroidDevSummit right from your couch. Weโre bringing the action directly to you!
Catch all the big announcements as they happen. Save the date for the keynote livestream โ goo.gle/4dqsQVQ
OkHttp version 5.5.1 and 4.12.1 are now available and patches the compromised eMudhra certificates
If you use OkHttp and support devices that do not have Google Play Services installed, you should upgrade ASAP
github.com/lysine-dev/okhttp
๐จ If you use OkHttp, you might want to add the following certificates to a blocklist ASAP due to a recent leak of certificate authority private keys
Thanks to Jesse Wilson for posting about this and adding the steps to mitigate
publicobject.com/2026/10/20/โฆ
๐จ If you use OkHttp, you might want to add the following certificates to a blocklist ASAP due to a recent leak of certificate authority private keys
Thanks to Jesse Wilson for posting about this and adding the steps to mitigate
publicobject.com/2026/10/20/โฆ
Ed Holloway-George ๐ retweeted
โผ๏ธ BREAKING: The private keys of 8 certificates from Indian certificate authority eMudhra were compromised, Mozilla says. Firefox blocked them within 3 hours.
Each key should be a 116-digit number, but one was just 4.
Anyone can guess them and forge HTTPS certs for any website.
I recently published a non-technical blog post on how a side-project of mine recently went 'viral' within the competitive Pokรฉmon TCG community
X-posting it here in case anyone is interested!
note.com/ptcgenius/n/nddb5b5โฆ
Ed Holloway-George ๐ retweeted
๐ Lots of handy Android CLI updates this week!
Device Streaming is now in CLI - agents can now spin up remote devices ๐ฑ
Fresh new batch of Android skills for Security, Identity, Media3, TV, and more ๐
Learn more in โฌ๏ธ ๐ค :
youtube.com/watch?v=JMPd2jbQโฆ
android-developers.googlebloโฆ
Spoke to some Android 'old-heads' at the recent Droidcon, and it's super interesting to me to see some of them starting to explore other industries/technologies
Is it AI's fault? Has the Android dev bubble burst? Are we all just "getting old"?
I honestly have no idea
Obviously a little biased, but 23 unique tracks of talks from industry leaders is a pretty insane offering from a conference at that price point imo
For what it's worth Berlin remains my absolute favourite droidcon event. So glad to have been a part of it once again ๐
Pretty disappointed with @nextappdevcon Berlin. Coffee isnโt even included and a croissant costs โฌ5. The food stalls are expensive as fuck. At a paid conference, Iโd expect at least basic refreshments to be covered. what are we even getting for 359โฌ ticket.Never coming again ๐
Ed Holloway-George ๐ retweeted
Nextapp devcon is live! ๐
The Guardsquare team is ready to talk all things mobile application security.
๐ค Catch Blend Hamitiโs talk on securing app secrets using hardware-backed cryptography and the Android Keystore.
๐ Booth #20: Chat with our technical team
Probably two of the most interesting slides I've seen in a keynote in a long long time
#nextapp26 #droidConBerlin26
Ed Holloway-George ๐ retweeted
TPCi if you need someone to lead your teams, let me know... i've got it down to a fine art
๐จ๐ There's a new security skill in town! ๐๐จ
Released earlier today, the android-permission-security skill can be used to audit and apply best practices surrounding permission handling
You can check it out here or install via the Android CLI:
github.com/android/skills/trโฆ
Ed Holloway-George ๐ retweeted
๐ Switching password managers on Android is now seamless โ goo.gle/4gZDS5s
You can securely move your passwords and passkeys directly between supported managers in just a few taps โ no file downloads, no recreating logins.
This new transfer experience is already available on Google Password Manager, @1Password, @Bitwarden Password Manager, and @Dashlane, with more partners to follow.




















