Taking the blinders off – The power of Stetho

•Download as PPTX, PDF•

1 like•268 views

The document discusses Stetho, an open source tool from Facebook that allows developers to inspect and debug Android applications. Stetho provides ways to view databases, API requests and responses, and shared preferences through Chrome developer tools. It also allows for viewing the view hierarchy and dumping app data through command line tools. The document provides instructions on setting up and using Stetho to enable these debugging features without requiring root access or rebuilding logging. It demonstrates how Stetho can be used to inspect networks, databases, and views in Chrome developer tools.

Mobile

PAGE1
© 2015 Apio Systems, Inc. Confidential 1
Jared Sheehan @ Driversiti
Taking the blinders off – The power of Stetho

PAGE2
© 2015 Apio Systems, Inc. Confidential 2
Who am I
Glass explorer, speech recognition enthusiast and big android nerd
Android Lead @Driversiti - driving safety for the mobile generation
Part of the team that built the Speech Recognition application for the Amazon Fire Phone
Suite of applications - AIM Android, Engadget Android, Distro Android, TechCrunch
Android, AOL HD, AIM Blackberry
Meetup Evangelist

PAGE3
© 2015 Apio Systems, Inc. Confidential 3
Overview
Data obscurity
Stetho to the rescue
How it works
Sample code
Questions?

PAGE4
© 2015 Apio Systems, Inc. Confidential 4
Data obscurity
Database access and visualization
API Request/Response obscurity
Shared Preferences
Solutions – Root, rebuilding logging over and over
A solution - Stetho

PAGE5
© 2015 Apio Systems, Inc. Confidential 5
Stetho – Facebook open source tool

PAGE6
© 2015 Apio Systems, Inc. Confidential 6
Web developers have it made
The web has been around for decades
The suite of tools for WebDevs is very robust
Facebook - Lets piggy back off one of them and build a deb bridge to access
Android data
Chrome developer tools - https://developer.chrome.com/devtools
Obviously, this is not secure, never ship this in production

PAGE7
© 2015 Apio Systems, Inc. Confidential 7
Stetho - What it does
Database access and visualization – No more Sqlite exporting
Remove API Request/Response obscurity – Network inspection
Easily read and change Shared Preferences
Replacement for Hierarchy Viewer
Dump App – Command line tool

PAGE8
© 2015 Apio Systems, Inc. Confidential 8
Enable Stetho - Core

PAGE9
© 2015 Apio Systems, Inc. Confidential 9
Enable Stetho – Network Helper

PAGE10
© 2015 Apio Systems, Inc. Confidential 10
Setup Stetho

PAGE11
© 2015 Apio Systems, Inc. Confidential 11
Setup Stetho – Interceptors

PAGE12
© 2015 Apio Systems, Inc. Confidential 12
Chrome Dev tools

PAGE13
© 2015 Apio Systems, Inc. Confidential 13
Network Inspection

PAGE14
© 2015 Apio Systems, Inc. Confidential 14
Database Inspection

PAGE15
© 2015 Apio Systems, Inc. Confidential 15
View Heirarchy

PAGE16
© 2015 Apio Systems, Inc. Confidential 16
Dump App

PAGE17
© 2015 Apio Systems, Inc. Confidential 17
JavaScript Console

PAGE18
© 2015 Apio Systems, Inc. Confidential 18
Driversiti by Apio
Mobile Platform (Software) as a Service
Utilizes mobile device sensor fusion in conjunction with proprietary algorithms
Initial focus: Transportation
Drivers, Fleets, Auto Insurers, Roadside Assistance
Provides drivers with “Situational Awareness”
- improves safety, efficiency, and the driving experience
No easily outdated, expensive embedded equipment, or connection to car
- uses only the smartphones/tablets that drivers already carry

PAGE19
© 2015 Apio Systems, Inc. Confidential
jared.sheehan@driversit.com
Android Developer
Tweet: @jayroo5245
THANK YOU

The document discusses speech recognition as a user interface. It begins with an introduction of the speaker and an overview of what will be covered, including a definition of speech recognition, examples of what it can be used for, and a demonstration. The document then discusses how speech recognition works from an technical perspective involving acoustic signal processing and various machine learning techniques. It covers aspects like speaker dependence and independence as well as continuous speech recognition. The document discusses moving beyond basic dictation to understand a user's intent in order to take appropriate actions. It provides examples of speech recognition systems and APIs from companies like Google, Apple, Amazon and Microsoft. It concludes with code examples and contact information for the speaker.

Appdome & OWASP Keynote Presentation | API World 2019

Anne Smith

APIdays Singapore 2019 - Rethinking security and compliance for the API ecosy...

apidays

CIS13: Mobile Single Sign-On: Extending SSO Out to the Client

CloudIDSummit

This document discusses extending single sign-on (SSO) capabilities to mobile clients. It proposes using OAuth and OpenID Connect to implement cross-application SSO on mobile devices while distinguishing between the device, user, and individual apps. A key challenge is the isolation of apps and data on mobile operating systems, which this solution aims to address through a native SDK and centralized management of tokens. The overall architecture features device registration, requesting access tokens via JSON Web Tokens to enable SSO, and administration of tokens.

"Open Source-ing Your Tech Startup" by Asep Bagja Priandana (Tanibox)

Tech in Asia ID

Asep is a Technopreneur and Professional Programmer Involved in several App development projects such as finance, photography, and open source project. Asep also received an award for winning Angel Hack Jakarta Hackathon back in 2013. Currently, Asep is a CEO of Tanibox (www.tanibox.com). This slide was shared on Tech in Asia Product Development Conference 2017 (PDC'17) on 9-10 August 2017. Get more insightful updates from TIA by subscribing techin.asia/updateselalu

Mobile Single-Sign On: Extending SSO Out to the Client - Layer 7's CTO Scott ...

CA API Management

Mobile SSO: Give App Users a Break from Typing Passwords

CA API Management

Why do we use mobile devices? Simple – they’re easy to use and very convenient. So, why do we make it so hard for mobile consumers to do business with us by confronting them with multiple login screens and passwords? While security is essential to protecting mobile usage, convenience cannot be sacrificed. With the release of the CA Layer 7 Mobile Access Gateway 2.0 and its Mobile SDK, organizations can now achieve faster mobile consumer engagement, end-to-end mobile app security and convenient mobile Single Sign-On (SSO). In this webinar, Tyson Whitten and Leif Bildoy of CA Technologies explore the why and how of mobile SSO and the Mobile Access Gateway. You will learn • The mobile app choices you need to make to enable better consumer engagement • The connectivity and security implications of these choices • The mobile security solutions that balance security and convenience

Rapid Mobile App to API Integration

Akana

This document discusses an integrated platform from SOA Software and Appery.io that allows for rapid mobile app development through API integration. The platform offers an end-to-end solution that manages APIs and builds cross-platform mobile apps in a single environment. This integrated experience allows for faster development time and increased adoption by developers. The document then demonstrates the platform's capabilities.

Enterprises always need a clear strategy to adopt mobility in their business. They either give devices to the workforce or allow them to use their own device. Hence, they need a device management tool that is flexible, simple and extensible to use. In this talk Shan will discuss the WSO2 Connected Device Management tool, which is built upon a unified architecture model to plug-in any kind of device to perform device management. The flexibility allows it to add any range of devices from mobiles and laptops to IoT devices.

How To Create An AppD Centre of Excellence at AppD Global Tour London

AppDynamics

SYPHERSAFE

Mustafa Kuğu

Connecting The Real World With The Virtual World

Ping Identity

The document discusses how identity management protocols like OAuth 2.0 and OpenID Connect can help connect physical devices and systems to digital networks and services by providing scalable identification, authentication, and authorization. It outlines challenges like security at scale and password overuse that these protocols help address. Examples are given of how identity solutions can enable use cases across different industries involving manufacturing, healthcare, automotive, and home automation.

Device Management for Connected Devices

WSO2

OOW13: Developing secure mobile applications (CON8902)

GregOracle

As more organizations develop mobile applications that access ever increasing levels of sensitive data, it is critical that standard security policies can be applied, whether coding native, hybrid or mobile browser-based applications. This session will teach you how to code your mobile applications to gain access to Oracle's Mobile Access Management services including device registration, authentication, authorization, step-up authentication and single sign-on.

Patterns and Practices in Mobile SSO

WSO2

Within the past decade, internet and mobile phone usage increased dramatically. However, mobile security practices have not caught up, as most mobile users do not password protect their devices and multifactor authentication is rarely used for mobile apps. This leaves devices and accounts vulnerable to theft and hacking. To address these issues, the document discusses how single sign-on (SSO) can increase security and productivity by streamlining login across native mobile apps and browsers. It also outlines some challenges with current SSO methods and standards being developed for improved mobile SSO, such as work by the OpenID Foundation.

Providing Internet Access via WSO2 Enterprise Mobility Manager

WSO2

Shanmugarajah is the Director of Mobile Architecture at WSO2 and has over 10 years of experience in mobile technology. He presented on how WSO2 provides internet access to employees via their Enterprise Mobility Manager (EMM) product. Previously, WSO2 used a less secure WPA2-PSK wireless network with a shared password. They have now implemented WPA2-Enterprise with a RADIUS server connected to LDAP for authentication. The EMM solution allows them to identify users, restrict which devices can connect, enforce security policies, and manage a bring-your-own-device program more securely.

Effective Smartphone UX at GREE

Kenichi Yonekawa

The document discusses effective user experience (UX) design for smartphones at GREE. It emphasizes the importance of providing immediate feedback to users, allowing mistakes to be easily corrected, and maintaining the user's context. The presentation also covers challenges like transitioning designs from feature phones, creating distinctly smartphone-like interfaces, supporting offline usage, and balancing cross-platform and operating system-specific UX approaches. The goal is to design effective UX that avoids disrupting the user's context. In closing, the author invites others to help design social media UX at GREE.

Nexus Protocol Gateway and BYOD

Samuel Erdtman

Mobile SSO using NAPPS

Ashish Jain

The document discusses single sign-on (SSO) for mobile applications. It notes the growth of smartphones and tablets and how users now access work applications from multiple devices. This has led to challenges around authentication and access management across different platforms and applications. The document explores existing SSO methods and standards like SAML and OAuth that aim to provide a common authentication mechanism. It introduces the concept of a "token agent" native mobile application that can obtain access tokens on behalf of other applications to enable SSO functionality and help address issues like separate authentication flows and access token management for each individual application.

Beyond MDM: 5 Things You Must do to Secure Mobile Devices in the Enterprise

CA API Management

Take a fresh approach to IT security and management, designed specifically for mobile Overview Twenty years ago, laptops revolutionized how the enterprise conducted business. But with the laptop came a host of new security and manageability challenges that we are arguably still trying to work out. Now, mobile computing promises to be exponentially more disruptive. It is a mistake to think you can apply yesterday’s laptop thinking to today’s mobile devices and still maintain a secure infrastructure. Mobile devices are radically different from laptops and they are evolving at a completely different pace, so they demand a fresh approach.

Top Tips For AppD Adoption Success - AppD Global Tour Stockholm

AppDynamics

Security Checklist: how iOS can help protecting your data.

Tomek Cejner

Marketing in the Age of Mobile

Adobe Experience Cloud

Mobile usage is growing rapidly, with people checking their phones hundreds of times per day. Many companies have rushed to create mobile apps but struggle with user acquisition, analytics, and iteration. Adobe's Project Fast Track created a unified solution across its mobile apps and Creative Cloud to gather usage data and enable data-driven product improvements. The project team integrated Adobe's Mobile SDK and Analytics to provide insights from nine apps in just nine weeks. This system allows Adobe to better understand user behavior and quickly iterate apps to increase engagement and subscriptions.

Forget Mobile-First … Move your customers to IoT-First, Drew Johnson, Aeris C...

Alan Quayle

The document discusses Aeris Communications' IoT Application Enablement Platform (AEP) which provides multiple capabilities needed for effective IoT solutions including connectivity, communication protocols, data management, storage, device management, real-time analytics, access management, and an application development toolkit. The AEP handles tasks like ingesting data from devices, defining rules and triggers, processing and storing data, and enabling application development through APIs and libraries. It also discusses Aeris' offerings that make up the AEP like AerPort for connectivity, AerCloud for data handling, and AerVoyance for analytics.

Vizag Virtual Meetup #7: Trending API Topics for 2022

Ravi Tamada

The document discusses API trends for 2022 that were presented at the APIForce conference by Andreas Oberrauter and Amir Khan. The top trends included design-first development, zero trust security, composable business, API lifecycle management, and hyperautomation with RPA integration. Design-first and zero trust approaches were discussed in more detail regarding the benefits they provide around faster development, improved security, and enabling parallel workstreams.

Charting your path to app nirvana with AEM Mobile

Bruce Lefebvre

The document discusses using Adobe Experience Manager (AEM) Mobile to develop mobile apps. It outlines three routes: 1) leveraging existing AEM content, 2) integrating an existing mobile app, and 3) enhancing an existing AEM Mobile app. For each route, it describes common needs and how AEM Mobile addresses them through features like content reuse across channels, centralized app management, hybrid app development, personalization, and over-the-air app updates. Demo sections show content reuse, app previewing, targeted content, and OTA updates. The document promotes AEM Mobile as a way to overcome issues like vendor lock-in and content fragmentation across platforms.

5 Reasons Why APIs Must be Part of Your Mobile Strategy - Scott Morrison, Dis...

CA API Management

This document discusses why APIs must be part of a mobile strategy and provides 5 reasons: 1) Firewalls make accessing APIs difficult due to changing clients and back-end systems, 2) Authentication, authorization, and single sign-on are important for mobile access but challenging, 3) Local app single sign-on is desirable without the negatives of a VPN, 4) Mobile OS isolation silos data and prevents sharing credentials, 5) Users need a way to logout if their device is lost or stolen. It then describes a solution of a native single sign-on SDK for mobile developers to address these problems using OAuth, OpenID Connect, and managing users, apps, and devices securely.

How to deploy AppInternals in azure

Ian Downard

Accelerating the Software Delivery Pipelinewith Mirantis OpenStack

Bob Sokol

This document discusses how Mirantis provides a complete solution for deploying applications on OpenStack, including Mirantis OpenStack for the infrastructure layer, Murano for the application catalog to deploy apps in a self-service manner, and automation tools to streamline the development and deployment process. It focuses on how this solution addresses the challenges of deploying complex applications on OpenStack in a simple and automated way.

What's hot

CIS14: Mobile SSO using NAPPS: OpenID Connect Profile for Native Apps-jain

CloudIDSummit

WSO2Con USA 2015: Connected Device Management for Enterprise Mobility and Beyond

WSO2

How To Create An AppD Centre of Excellence at AppD Global Tour London

AppDynamics

SYPHERSAFE

Mustafa Kuğu

Connecting The Real World With The Virtual World

Ping Identity

Device Management for Connected Devices

WSO2

OOW13: Developing secure mobile applications (CON8902)

GregOracle

Patterns and Practices in Mobile SSO

WSO2

Providing Internet Access via WSO2 Enterprise Mobility Manager

WSO2

Effective Smartphone UX at GREE

Kenichi Yonekawa

Nexus Protocol Gateway and BYOD

Samuel Erdtman

Mobile SSO using NAPPS

Ashish Jain

Beyond MDM: 5 Things You Must do to Secure Mobile Devices in the Enterprise

CA API Management

Top Tips For AppD Adoption Success - AppD Global Tour Stockholm

AppDynamics

Security Checklist: how iOS can help protecting your data.

Tomek Cejner

What's hot (15)

CIS14: Mobile SSO using NAPPS: OpenID Connect Profile for Native Apps-jain

WSO2Con USA 2015: Connected Device Management for Enterprise Mobility and Beyond

How To Create An AppD Centre of Excellence at AppD Global Tour London

SYPHERSAFE

Connecting The Real World With The Virtual World

Device Management for Connected Devices

OOW13: Developing secure mobile applications (CON8902)

Patterns and Practices in Mobile SSO

Providing Internet Access via WSO2 Enterprise Mobility Manager

Effective Smartphone UX at GREE

Nexus Protocol Gateway and BYOD

Mobile SSO using NAPPS

Beyond MDM: 5 Things You Must do to Secure Mobile Devices in the Enterprise

Top Tips For AppD Adoption Success - AppD Global Tour Stockholm

Security Checklist: how iOS can help protecting your data.

Similar to Taking the blinders off – The power of Stetho

Marketing in the Age of Mobile

Adobe Experience Cloud

Forget Mobile-First … Move your customers to IoT-First, Drew Johnson, Aeris C...

Alan Quayle

Vizag Virtual Meetup #7: Trending API Topics for 2022

Ravi Tamada

Charting your path to app nirvana with AEM Mobile

Bruce Lefebvre

5 Reasons Why APIs Must be Part of Your Mobile Strategy - Scott Morrison, Dis...

CA API Management

How to deploy AppInternals in azure

Ian Downard

Accelerating the Software Delivery Pipelinewith Mirantis OpenStack

Bob Sokol

API Services: Harness the Power of Enterprise Infrastructure

Apigee | Google Cloud

When existing enterprise IT systems were designed, mobile, social and cloud services were in their infancy and most interaction was internal to the company. Today, enterprise IT is challenged with supporting agile changes, fast releases, and exposing functionality to be consumed by partners who haven’t even been identified! Learn how security, monitoring, logging and other technology in the Apigee API Platform integrates with existing enterprise infrastructure to meet the challenges of the new digital marketplace while allowing IT to continue to provide world-class security and protection for a company’s systems and for users’ data.

apidays LIVE New York 2021 - Simplify Open Policy Agent with Styra DAS by Tim...

apidays

Bangalore Cloud Foundry meetup - Mani

Mani Chandrasekaran

The document discusses building cloud native applications using microservices on Pivotal Cloud Foundry. It introduces concepts like microservices, DevOps, continuous delivery and containers. It presents Spring Cloud and Spring Boot as frameworks for building cloud native applications and microservices. It includes demos and links to resources for migrating monolithic applications to microservices using Spring technologies on Cloud Foundry.

Cloud Deployments Done Right: Why APIs are Key

Apigee | Google Cloud

As you move your workloads to the cloud or build new cloud-native applications, how will you connect them with other apps and data that still reside in your data centers, or in other clouds? The de facto standard to connect cloud workloads is the REST API. To get the most out of your cloud deployments, there’s a host of best practices around managing APIs in the cloud world. This presentation covers: -challenges faced as companies move to the cloud - managing security, governance, and visibility concerns - how APIs help you in a multi-cloud world

H2O World - Self Guiding Applications with Venkatesh Yadav

Sri Ambati

This document discusses self-guiding mobile applications that can provide engaging user experiences through predictive features. It presents a proof of concept for a photo editing app that uses crowdsourced usage data and machine learning algorithms to predict users' next actions and display relevant tools prominently. Performance results are promising. The document recommends exposing predictive models through REST APIs for loose coupling and continuous development, demonstrating how models trained on a platform can receive API requests and send predictions to applications.

How to Build a DevOps Toolchain

IBM UrbanCode Products

The document discusses DevOps toolchains which integrate development and operations tools to improve software delivery. It provides examples of toolchains for activities like continuous integration, deployment, testing, and monitoring. The key benefits are cited as increased efficiency, consistency, safety, and visibility across the development and operations processes. The document recommends auditing current practices, agreeing on a vision, and gradually adopting tools to achieve DevOps.

Removing Barriers Between Dev and Ops

Marie-Jeanne Dougados

The document discusses how a cloud native platform can help remove barriers between development and operations teams. It outlines key elements of such a platform including rapid provisioning, deployment, scaling, monitoring, and upgrading applications without downtime. The platform aims to enable continuous delivery and deployment through shared tools and an integrated culture between Dev and Ops.

inSis Suite - Process Data Analytics, Dashboards, Portal & Historian

Kondapi V Siva Rama Brahmam

Managing APIs with MuleSoft

Guilherme Pereira Silva

This document provides an overview and agenda for a MuleSoft Meetup event in São Paulo on managing APIs with MuleSoft. The meetup will include introductions, a sponsor presentation from Cognizant, a discussion of API gateway concepts, a demo, and questions. It will provide a safe space for attendees to learn and share integration experiences. The goal is to discuss topics key to successful application integration on MuleSoft's Anypoint Platform. Networking time will conclude the event.

Can Containers be secured in a PaaS?

Tom Kranz

Tom Kranz, a security engineer at Pivotal, discusses whether containers can be secured in a Platform as a Service (PaaS). He emphasizes that security depends on context and implementation rather than features alone. Kranz outlines evaluating risk based on potential attackers, attack vectors, and data at risk to design a secure Pivotal Cloud Foundry implementation. Container isolation through technologies like Warden and Garden can help mitigate attacks by restricting access and network traffic, though apps themselves must also be developed securely. Overall, containers add security benefits to a PaaS but do not eliminate all risk.

Can Containers be Secured in a PaaS?

Tom Kranz

Mobile Accessibility Best Practices & Trends

Aidan Tierney

Webcast: Deep-Dive Apigee Edge Microgateway

Apigee | Google Cloud

Apigee Edge Microgateway is a lightweight solution which enables enterprises to manage their APIs in a hybrid cloud deployment setup, where API traffic flows through a gateway running close to the application while being managed centrally through the Edge Public or Private Cloud. In this deep-dive technical webcast, Apigee’s Prabhat Jha will: - discuss the features of the Edge Microgateway - explore use cases for hybrid cloud API management - conduct a Microgateway demo

Similar to Taking the blinders off – The power of Stetho (20)

Marketing in the Age of Mobile

Forget Mobile-First … Move your customers to IoT-First, Drew Johnson, Aeris C...

Vizag Virtual Meetup #7: Trending API Topics for 2022

Charting your path to app nirvana with AEM Mobile

5 Reasons Why APIs Must be Part of Your Mobile Strategy - Scott Morrison, Dis...

How to deploy AppInternals in azure

Accelerating the Software Delivery Pipelinewith Mirantis OpenStack

API Services: Harness the Power of Enterprise Infrastructure

apidays LIVE New York 2021 - Simplify Open Policy Agent with Styra DAS by Tim...

Bangalore Cloud Foundry meetup - Mani

Cloud Deployments Done Right: Why APIs are Key

H2O World - Self Guiding Applications with Venkatesh Yadav

How to Build a DevOps Toolchain

Removing Barriers Between Dev and Ops

inSis Suite - Process Data Analytics, Dashboards, Portal & Historian

Managing APIs with MuleSoft

Can Containers be secured in a PaaS?

Can Containers be Secured in a PaaS?

Mobile Accessibility Best Practices & Trends

Webcast: Deep-Dive Apigee Edge Microgateway

Taking the blinders off – The power of Stetho

2. PAGE2 © 2015 Apio Systems, Inc. Confidential 2 Who am I Glass explorer, speech recognition enthusiast and big android nerd Android Lead @Driversiti - driving safety for the mobile generation Part of the team that built the Speech Recognition application for the Amazon Fire Phone Suite of applications - AIM Android, Engadget Android, Distro Android, TechCrunch Android, AOL HD, AIM Blackberry Meetup Evangelist

4. PAGE4 © 2015 Apio Systems, Inc. Confidential 4 Data obscurity Database access and visualization API Request/Response obscurity Shared Preferences Solutions – Root, rebuilding logging over and over A solution - Stetho

6. PAGE6 © 2015 Apio Systems, Inc. Confidential 6 Web developers have it made The web has been around for decades The suite of tools for WebDevs is very robust Facebook - Lets piggy back off one of them and build a deb bridge to access Android data Chrome developer tools - https://developer.chrome.com/devtools Obviously, this is not secure, never ship this in production

7. PAGE7 © 2015 Apio Systems, Inc. Confidential 7 Stetho - What it does Database access and visualization – No more Sqlite exporting Remove API Request/Response obscurity – Network inspection Easily read and change Shared Preferences Replacement for Hierarchy Viewer Dump App – Command line tool

18. PAGE18 © 2015 Apio Systems, Inc. Confidential 18 Driversiti by Apio Mobile Platform (Software) as a Service Utilizes mobile device sensor fusion in conjunction with proprietary algorithms Initial focus: Transportation Drivers, Fleets, Auto Insurers, Roadside Assistance Provides drivers with “Situational Awareness” - improves safety, efficiency, and the driving experience No easily outdated, expensive embedded equipment, or connection to car - uses only the smartphones/tablets that drivers already carry

Taking the blinders off – The power of Stetho

Recommended

Recommended

More Related Content

What's hot

What's hot (15)

Similar to Taking the blinders off – The power of Stetho

Similar to Taking the blinders off – The power of Stetho (20)

Taking the blinders off – The power of Stetho