droidsec / droidsec.github.io Goto Github PK

Need to solve this with some kind of redirector

This should be stock firmware only. No custom ROMs or mods unless they somehow relate to security research. Obviously this is a grey area and will have to be handled on a case-by-case basis.

Would be handy to have more than just the current month's OTA links. An exhaustive list may be overkill, so maybe just include the previous month's links along with the links for the current month ?

This is pretty open ended, but something like http://changes.droidsec.org/ but for kernel sources.

Is it possible to show the differences between the CTS branches?
For instance android-cts-5.1_r3 => android-cts-5.1_r4

Thanks

I'm not sure why I never made an issue for this as it has been on my mind since last fall.

Source code should be as close to the original that it comes from as possible.

For vendors that only distribute tar balls, host a git repository that tracks modifications between releases but doesn't require re-downloading the entire thing.

This database should probably be in JSON so the data can be pushed to a browser for further handling (filtering, querying, etc).

Information should include (for starters):

• hardware details
  • revisions / model numbers
    • SoC, memory, storage, etc (others TBD)
    • all known existing stock firmwares and OTA updates for the device
      • build.prop information (perhaps only key values, TBD)
      • kernel version information
      • vulnerabilities known to affect this firmware

others TBD

https://twitter.com/TeamAndIRC/status/422559424922673152

For any Android-related tools that are on github, forking them into the organization account make finding them easier.

StackExchange is very different from XDA-Dev style forums. Stack exchanges include a voting system that makes usability ridiculously better and build clout around those that answer fully and correctly. It also rewards people for asking great questions.

Just a thought.

Should be a favicon.ico in the root of the website repo.

We should display a funny browser-specific 404 message similar to the existing one that is specific to Chrome.

as title

Might be nice to keep a collection of all the white papers and security blogs.
This blog made me think of that: http://androidtamer.com/android-security-enhancements/

there are some android security papers and some of them wrote in chinese :)
http://www.80vul.com/android/data-clone.txt
http://www.80vul.com/webzine_0x06/PSTZine_0x06_0x06.txt
http://www.80vul.com/webzine_0x06/PSTZine_0x06_0x05.txt
http://www.80vul.com/webzine_0x06/PSTZine_0x06_0x04.txt

This is kind of two part:

Track which devices members have -- so that they can be called upon for testing when needed.

Collect devices for the group -- these devices can be loaned to members as requested for particular projects.

Also possibly other error pages too.