
Co-Founder @LifePlanner_co. Engineering @spairally . Engineering Educator @reduzer_tech
Joined March 2021
- Tweets48.4K
- Following1.7K
- Followers8.2K
- Likes88.7K
addJavascriptInterface is catastrophically insecure.
Any public method on an injected Java object (including getClass()) is callable from JavaScript, leading to full remote code execution (CVE-2012-6636, CVE-2013-4710 cve.org/CVERecord?id=CVE-201…)
Are we seriously encouraging people to use WebView in 2026? For auth nonetheless?
I thought WebView was this attack surface that could enable remote code execution on your app through the JS-Android layer that it provides?
Google killed legacy signin, in favour of Credentials Manager (as is tradition for Google).
These enhancements could well have fit in the legacy GoogleSignIn SDK for Android but Google just gotta kill things that people depend upon.
The first chapter on “Strategic Assessment” relentlessly emphasizes prioritizing analysis and evaluation before action, being aware of deceptive patterns and making an impersonal assessment of yourself as well as the challenge/opponent.
“Wow what a week!”
*Checks calendar”
“It’s only Wednesday!!??”
📸@LifePlanner_co
The translator’s introduction is very detailed and still very condensed with references to Sun’s wisdom as well as links to other eastern scholars such as the authors of Taoism and Buddhist philosophy.
Many references to I Ching (The Book of Changes) and Bushido, Samurai code
It is impossible to read this book without my notebook by my side.
The amount of timelessness wisdom contained in this (very old) book is astonishing












