Links for Chapter Lectures

Ch 1a: Anthony Weiner sexting scandals - Wikipedia
Ch 1b: Ten Immutable Laws Of Security (Version 2.0)
Ch 1c: How Apple and Amazon Security Flaws Led to My Epic Hacking WIRED
Ch 1d: API Gateway to manage and secure Web APIs- Axway
Ch 1e: Axway - API Gateway Free Trial
Ch 1f: Android Fragmentation Report August 2014
Ch 1g: How Apple is improving mobile app security
Ch 1h: Report: Malware-infected Android apps spike in the Google Play store (2014)
Ch 1i: 14 best antivirus Android apps (2014)
Ch 1j: Major security vulnerability in some Samsung phones could trigger factory reset via web page (2012)
Ch 1k: Vulnerability Note VU#251635 - Samsung and HTC android phone information disclosure vulnerability
Ch 1l: Carrier IQ: What it is, what it isn't, and what you need to know
Ch 1m: Secure Element (SE) Chips
Ch 1n: Apple's Worst Security Breach: 114,000 iPad Owners Exposed (2010)
Ch 1o: weev - Wikipedia
Ch 1p: WS-Security - Wikipedia
Ch 1q: Android Tablet Analysis for the 2014 Holiday Season
Ch 1r: Mobile Device Management -- Gartner Magic Quadrant (2014)

Ch 2a: How to Crack GSM A5 Encryption (from 2009)
Ch 2b: 26C3: GSM: SRSLY?
Ch 2b2: SMS DoS could kill a whole city from a single attacking device (2005)
Ch 2c: Never trust SMS: iOS text spoofing
Ch 2d: Android Vulnerability Opens Door to SMS Phishing Scams
Ch 2e: How I (Easily) Hacked Into Voice Mail (2011)
Ch 2f: Caller ID Spoofing, Voice Changing & Call Recording - Prank Calls - SpoofCard
Ch 2g: Poking at the femtocell hardware in an AT&T Microcell (2012)
Ch 2h: Hacking the Vodafone Femtocell (2009)

Ch 3a: iOS - Wikipedia
Ch 3b: Why Apple's 64-bit iPhone chip is a bigger deal than you think (2013)
Ch 3c: Position-independent code - Wikipedia
Ch 3d: Apple iOS 4 Security Evaluation -- Dino A. Dai Zovi (2011)
Ch 3e: What to Do Before You Give Away your Old iPhone (2014)
Ch 3f: How-To do many things on iPhone, with good screen images
Ch 3g: How The World Butchered Benjamin Franklin's Quote On Liberty Vs. Security
Ch 3h: New virus for jailbroken iPhones the most serious so far (2009)
Ch 3i: New Malware 'Unfold Baby Panda' Discovered on Jailbroken iOS (2014)
Ch 3j: AdThief malware infects over 75,000 jailbroken iOS devices (2014)
Ch 3k: Unlocking A New iPhone Is Now Illegal, But Jailbreaking Is Still Legal
Ch 3l: Obama Signs Cell Phone Unlocking Bill Into Law, iPhone Unlocking No Longer Illegal (Aug., 2014)
Ch 3k: Jailbreaking now legal under DMCA for smartphones, but not tablets (2012)
Ch 3n: evasi0n iOS 7.0.x Jailbreak
Ch 3o: Tethered Jailbreak vs Untethered Jailbreak
Ch 3p: Apple Kicks Security Researcher Out Of The App Store After iOS Exploit Demonstration
Ch 3q: Metasploit Exploits for MobileSafari
Ch 3r: About the security content of iOS 4.3.4 Software Update - Apple Support
Ch 3s: Analysis of the jailbreakme v3 font exploit - Sogeti ESEC Lab
Ch 3t: Source code for iKee worm
Ch 3u: Syn: IPhone Port Scan
Ch 3v: iPhone - Security 101 (from 2008)
Ch 3w: CVE-2009-1683 ICMP DoS Exploit
Ch 3x: Apple iPhone SMS Application Remote Code Execution Vulnerability
Ch 3y: Fuzzing the Phone in your Phone (Black Hat USA 2009
Ch 3z: Baseband Device - The iPhone Wiki
Ch 3z1: WireLurker Malware Infects Macs, Attacks Non-Jailbroken iPhones (Nov. 2014)
Ch 3z2: Lost iPhone? Lost Passwords!
Ch 3z3: Bypass lockscreen in iOS 6.1 with "Emergency Call" feature
Ch 3z4: Bypass lockscreen in iOS 6.1.3 with Siri
Ch 3z5: Bypass lockscreen in iOS 8 with Siri
Ch 3z6: Four-digit passcodes are a weak point in iOS 8 data encryption
Ch 3z7: How Thieves Unlock Passcodes on Stolen iPhones (And How to Protect Yourself Against It)
Ch 3z8: IP-BOX iPhone Password Unlock Tool
Ch 3z9: Cracking and Analyzing Apple iCloud backups, Find My iPhone, Document Storage
Ch 3z10: Signaling Post-Snowden Era, New iPhone Locks Out N.S.A. (Sept. 2014)
Ch 3z11: Apple Still Has Plenty of Your Data for the Feds - The Intercept
Ch 3z12: Apple - Apple Pay
Ch 3z13: Apple Pay vs. Google Wallet
Ch 3z14: About App Distribution
Ch 3z15: Start Developing iOS Apps Today: Setup
Ch 3z16: Start Developing iOS Apps Today: Where to Go from Here
Ch 3z17: Malicious Profiles - The Sleeping Giant of iOS Security
Ch 3z18: iOS Threats - Malicious Configuration Profiles, Threat, Detection & More
Ch 3z19: Latest iOS 'malware' is easy to detect and avoid
Ch 3z20: iCloud - Bypass - doulCi
Ch 3z21: Exploring and Exploiting iOS Web Browsers
Ch 3z22: Adding Trusted Root Certificate Authorities to iOS (iPad, iPhone) (2012)
Ch 3z23: Installing Corporate CA Certificates on iPhone or iPad (2013)
Ch 3z24: MEMSCAN dumps iOS process memory
Ch 3z25: XCode on Windows: How to Develop for Mac or iOS on a PC
Ch 3z26: Jailbreaking is annoying

Ch 4a: iPhone v. Android Market Share (May, 2014)
Ch 4b: Downloading the Source Android Developers
Ch 4c: Android Architecture - The Key Concepts of Android OS
Ch 4d: Manifest.permission Android Developers
Ch 4e: Download Android Studio and SDK Tools
Ch 4f: Google releases Android Studio 1.0, the first stable version of its IDE
Ch 4g Android Emulator
Ch 4h: Android Application hacking with Insecure Bank Part 1
Ch 4i: Brazilian Trojan Bankers -- now on your Android Play Store! (made with App Inventor)
Ch 4j: Careful with photos from unknown sources in Android: They could now contain a nasty surprise
Ch 4k: How to root your android 4.1.1 and up no computer - YouTube
Ch 4l: Root Master 1.3.6_Cekas FIX Sharebertron.blogspot.com
Ch 4m: Fastest way to Root any Android Phone Without a Computer
Ch 4n: How to install Google Play Store app manually
Ch 4o: How to Install Android in VirtualBox
Ch 4p: How to Root Galaxy S3 on Android 4.34.4.2!
Ch 4q: How to Root the Samsung Galaxy S3 on Android 4.3 Jelly Bean
Ch 4r: How to root Android x86 4.3
Ch 4s: Moonpig vulnerability in Android App -- Great example of analysis
Ch 4t: 30 Must-Try Apps For Rooted Android Phones
Ch 4u: DiskDigger undelete (root) - Android Apps on Google Play
Ch 4v: Wifi Protector Detects and Prevents ARP spoofing (Android)
Ch 4w: AFWall (Android Firewall ) - Android Apps on Google Play
Ch 4x: DroidSheep Simple OpenSource Session hijacking on Android devices
Ch 4y: drozer: a comprehensive security audit and attack framework for Android
Ch 4z1: drozer user's guide
Ch 4z2: DroidSheep : ARP-Spoofing App for Android
Ch 4z3: Linux Deploy - Android Apps on Google Play -- USE FOR PROJECT
Ch 4z4: Google abandons 60 percent of Android users (Jan. 12, 2014)
Ch 4z5: Android Forensics -- Open Course Materials!
Ch 4z6: Android Hacking and Security, Part 13: Introduction to Drozer - InfoSec Institute
Ch 4z7: Android Hacking and Security, Part 1: Exploiting and Securing Application Components - InfoSec Institute
Ch 4z8: Android Hacking and Security, Part 2: Content Provider Leakage - InfoSec Institute
Ch 4z9: Android Hacking and Security, Part 3: Exploiting Broadcast Receivers - InfoSec Institute
Ch 4z10: The insecure Android app for your hacking pleasure
Ch 4z11: NSA approves Samsung Knox for use by TOP SECRET g-men (Oct., 2014)
Ch 4z12: Deconstructing an insecure Android password manager
Ch 4z13: Android hacking apps, including SSL killers
Ch 4z14: Setting up a persistent trusted CA in an Android emulator
Ch 4z15: Signing an Android Application for Real Life Mobile Device Usage Installation
Ch 4z16: Android Assessments with GenyMotion Burp
Ch 4z17: Genymotion - User Guide
Ch 4z18: Installing Android Studio - Google Slides
Ch 4z19: Storage: Nexus 5 Data
Ch 4z20: Introduction to Android Development and Security
Ch 4z21: OWASP-GoatDroid-Project GitHub
Ch 4z22: Android Hackmes
Ch 4z23: ProjectsOWASP GoatDroid Project
Ch 4z24: How to install GoatDroid in MobiSec
Ch 4z25: Mobile PenetraUon TesUng with MobiSec
Ch 4z26: My Null Android Penetration Session
Ch 4z27: Android Application Penetration Testing: Setting up, Certificate Installation and GoatDroid Installation
Ch 4z28: OWASP Global Webinar - Jack Mannino - GoatDroid release - YouTube
Ch 4z29: Steal User Information from Android App -- GoatDroid Example
Ch 4z30: Using Introspy and Drozer to analyse GoatDroid - YouTube
Ch 4z31: Securing Android Applications With Goatdroid -- SecurityTube
Ch 4z32: Debug Howto - Android-x86 - Porting Android to x86
Ch 4z33: android - How to install Google Play Services in a Genymotion VM
Ch 4z34: Android emulator: Solution for "Please ensure Intel HAXM is properly installed and usable." error
Ch 4z35: Investigating Your RAM Usage Android Developers
Ch 4z36: Download Eclipse Memory Analyzer Tool for Android
Ch 4z37: Microsoft to Invest in Cyanogen - Taking Android Away from Google
Ch 4z38: Saving data to a file in your Android application
Ch 4z39: KitKat and SD cards -- what's fixed, what's broken and what's misunderstood
Ch 4z40: Make a filedirectory read only on Android?
Ch 4z41: Using Cryptography to Store Credentials Safely Android Developers Blog
Ch 4z42: EmulatorRoot BlueStacks 0.7.7.813 Android Development and Hacking XDA Forums
Ch 4z43: Dancing with dalvik
Ch 4z44: Can't connect Genymotion over ADB
Ch 4z45: Issue 621 - android-apktool - Exception in thread 'main' - error while compiling - A tool for reverse engineering Android apk files - Google Project Hosting
Ch 4z46: Run shell commands from android program - Stack Overflow
Ch 4z47: Adware Android Apps Found in Google Play With Millions of Downloads (2-4-2015)
Ch 4z48: Connecting to the Network Android Developers
Ch 4z49: Android Network Connection Tutorial
Ch 4z50: java - Decompile .smali files on an APK
Ch 4z51: android - decompiling DEX into Java sourcecode
Ch 4z52: android cracking: example.smali
Ch 4z53: android cracking: example-structures.smali -- has HTTP GET
Ch 4z54: Android Reverse Engineering - A Kick Start
Ch 4z55: Want to break some Android apps? -- USEFUL FOR PROJECTS
Ch 4z56: Apache HttpClient - Tutorial (for Android)
Ch 4z57: Registers - smali - Information about registers in the smali format specifically, and dalvik bytecode in general
Ch 4z58: android.os.NetworkOnMainThreadException - Stack Overflow
Ch 4z59: ProGuard
Ch 4z60: How to Use ProGuard in Android Studio
Ch 4z61: Certificate and Public Key Pinning - OWASP
Ch 4z62: Intent Android Developers
Ch 4z63: Intents and Intent Filters Android Developers
Ch 4z64: android - launch sms application with an intent - Stack Overflow
Ch 4z65: Skype For Android Is Exposing Your Name, Phone Number, Chat Logs, And A Lot More (from 2011)
Ch 4z66: NESSUS ANDROID APP - stores login info in plain text on SD card
Ch 4z67: Nessus app removed from Google Play
Ch 4z68: CVE-2012-2980: Samsung and HTC PIN Data Exposure in Log
Ch 4z69: Facebook SDK logs access token
Ch 4z70: CVE-2011-4872: HTC devices expose WiFi password to malicious apps
Ch 4z71: CVE-2010-4804: Android "content:" Scheme leaks contents of SD card
Ch 4z72: HTC IQRD Android Permission Leakage CVE-2012-2217
Ch 4z73: Where is usergroup id info stored on Android and how do I inerpret it?
Ch 4z74: Android Runtime has now replaced Dalvik

Ch 5a: Mobile Viruses (from 2011)
Ch 5b: F-Secure Mobile Threat Report Q1: 2014
Ch 5c: DroidDream Becomes Android Market Nightmare (from 2011)
Ch 5d: Google's Bouncer Malware Tool Hacked (2012)
Ch 5e: An Evaluation of the Application Verification Service in Android 4.2
Ch 5f: DroidDream Malware Found in Official Android Market
Ch 5g: Best Android Antivirus Apps 2015

Ch 6a: SOAP - Wikipedia
Ch 6b: JSON
Ch 6c: Learn REST: A Tutorial
Ch 6d: OWASP Top Ten (pdf)
Ch 6e: Top Ten Mobile Risks - OWASP
Ch 6f: Web Services Description Language - Wikipedia
Ch 6g: SoapUI - The Home of Functional Testing
Ch 6h: Secure Elements for NFC Payments by Phones
Ch 6i: 6 Things You Should Know About Fragment URLs
Ch 6j: Android Reflection

Ch 7a: Top 10 Enterprise Mobility Management Suites In Gartner*quot*s Magic Quadrant
Ch 7b: MDM Policy Edit
Ch 7c: Method Swizzling
Ch 7d: Arxan EnsureIT App Protections -- POSSIBLE PROJECT
Ch 7e: Arxan Report on Mobile App Security (Nov. 2014)
Ch 7f: State of Mobile App Security Infographic -- Most Apps Have Been Hacked (Nov. 2014)

Ch 8a: Microsoft Threat Modeling (1999)
Ch 8b: Trike Threat Modeling
Ch 8c: OCTAVE | Cyber Risk and Resilience Management | The CERT Division
Ch 8d: Threat modeling - Cigital
Ch 8e: Real World Threat Modeling Using the PASTA Methodology
Ch 8f: The Dangers of Square Bracket Notation
Ch 8g: ISO/IEC 7816 - Wikipedia
Ch 8h: ISO/IEC 14443 - Wikipedia
Ch 8i: MIFARE Hacks
Ch 8j: BART uses MIFARE Cards
Ch 8k: Anatomy of a Subway Hack
Ch 8l: New open-source app extracts passwords stored in Mac OS X keychain (from 2012)
Ch 8m: Apple iOS Security White Paper
Ch 8n: Encryption | Android Developers
Ch 8o: Google*quot*s *quot*encrypted-by-default*quot* Android is NOT encrypting by default (Mar. 2015)
Ch 8p: Certificate Pinning

Ch 9a: Isis Wallet mobile payment service changes its name to Softcard
Ch 9b: Apple Pay, Samsung Pay, Google Wallet, and more: A guide to mobile payment apps (Mar. 29, 2015)
Ch 9c: Missing the EMV Liability Shift Bears a Huge Cost
Ch 9d: Apple Pay - Wikipedia
Ch 9e: Samsung Pay vs. Google Wallet vs. Apple Pay: Drawing the Battle Lines (Mar., 2015)
Ch 9f: CNN Infographic comparing mobile payment options (Mar., 2015)
Ch 9g: Android Pay Is Real, And Will Give Developers The Reins As An API (Mar., 2015)
Ch 9h: CurrentC Is The Big Retailers\' Clunky Attempt To Kill Apple Pay And Credit Card Fees (Oct., 2014)
Ch 9i: Wocket wants to replace your wallet (April, 2015)
Ch 9j: CurrentC suffers pre-launch compromise (Oct. 2014)
Ch 9k: In-depth look at CurrentC and the personal data they want to collect (Oct., 2014)
Ch 9l: Square, Inc. - Wikipedia
Ch 9m: Universal Integrated Circuit Card - Wikipedia
Ch 9n: NFC payments now possible with microSD cards
Ch 9o: DeviceFidelity gets global Visa approval for CredenSE
Ch 9p: Kili acquires NFC microSD pioneer DeviceFidelity (Nov. 2014)
Ch 9q: Square buys mPOS developer Kili (Mar., 2015)
Ch 9r: GlobalPlatform
Ch 9s: Researcher hacks Google Wallet PIN on rooted Android phone (Feb., 2012)
Ch 9t: New Cloud-Based Google Wallet Still Vulnerable to Old PIN Hack (AUg., 2012)
Ch 9u: Square and Chip-and-PIN
Ch 9v: Square's Fees and Pricing
Ch 9u: Square vs. VeriFone: A Long Rivalry

New Links

Inside Eurograbber: How SMS Was Used to Pilfer Millions (2012)
Google releases tool to test apps, devices for SSL/TLS weaknesses (from 2014)
Home Network SSL Checker - Android Apps
MITHYS -- detecting and mitigating SSL vulnerabilities on Android (PDF)
Apple users at risk of SSL man-in-the-middle attacks (2014)
Test antivirus software for Android - March 2015 | AV-TEST
Appthority saw consistent risky app behaviors across both platforms, iOS and Android
Kali Linux NetHunter for Nexus and OnePlus
Could Sexy Space be the Birth of the SMS Botnet? (2009) ty @irfan_asrar
Politically-motivated mobile malware used to sabotage womens\' rights campaign in the Middle East (2013)
Android Malware Set for July 4 Carries Political Message (2013)
Google Play Store has a Porn Problem, and it\'s Not Going Anywhere (from 2014) ty @irfan_asrar
Bitdefender\'s iOS privacy app yanked from the App Store (from 2012) ty @irfan_asrar
More fake antivirus programs found in Google Play, Windows Phone Store (2014) ty @irfan_asrar
Android Kitchen--make custom ROMs
Android botnet spread through drive-by downloads (2014) ty @irfan_asrar
xcode - Cleaning up the iPhone simulator
NowSecure App for Android devices
Alternative Distribution Options | Android Developers
88% of Android Apps make cryptography errors (2013)
Flawed Android Factory Reset Allows Recovery of Sensitive Data: Researchers -- ADD TO LECTURE
How Long Does it Take for your App to be Approved? Google: 2 hrs., Apple: 4-6 days (from 2014)
Blue Cross Blue Shield of North Carolina HIPPA and COPPA Violations -- Fixed in 2 days!
Fandango, Credit Karma Settle FTC Charges from SSL Certificate Validation Failures (from 2014) (ty Robert Butler)
Air New Zealand\'s OneSmart App is very clever!
Apache Cordova Vulnerability Allows One-Click Modification of Android Apps (May, 2015)
Arxan\'s page supporting the importance of binary protections
Two Thirds of Personal Banking Apps Found Full of Vulnerabilities (2014)
Making an SSL Auditing Proxy with a Mac and Burp
Certificate Pinning in a Mobile Application
Six Strategies for Protecting Your Mobile Games Against Hackers, Crackers
Installing Ubuntu on a Chromebook
Installing Ubuntu on the Acer Chromebook 11 (CB3-111-C670)
2015-07-05: Installing Chrubuntu on the Acer Chromebook C720P
2015-07-05: Installing Real Ubuntu on the Acer Chromebook C720P
Ch 1s: Xcode 7 allows anyone to download, build and �sideload\' iOS apps for free
AirWatch MDM Product with free trial
Android Studio doesn\'t start, fails saying components not installed - NEEDED FOR MAC
Most top 500 Android mobile apps have security and privacy risks (2014)
Bump keys and lock picks - Fast shipping world wide.
Someone at Subway is a serious security nerd
Download Android Casino Apps Direct To Your Mobile -- Unofficial source!
Hacking Team\'s evil Android app had code to bypass Google Play screening
Google\'s Photos App Keeps Saving Pictures After App Is Deleted
How a Stingray works, including how it cracks encryption
Installing Ubuntu on the Acer Chromebook 11 (CB3-111-C670)
Installing Chrubuntu on the Acer Chromebook C720P
Installing Real Ubuntu on the Acer Chromebook C720P
How to copy virtual devices downloaded by Genymotion to another machine?
Webkey (ROOT REQUIRED) - Replacement for ADB on Android phones
Why app developers should care about SSL pinning
Here\'s what Google thinks of Android security, 2011-present
ING bank has emulator detection and won\'t run in Genymotion
The DANE Protocol DNS-Based Authentication of Named Entities -- Like SSL Pinning!
New Cyber Hacks for Mobile Apps Discovered--\"Masque\" Attacks
iOS Application Security Testing Cheat Sheet - OWASP
iOS Application Security Part 35 - Auditing iOS applications with iDB
DVIA (Damn Vulnerable iOS App) - MANY GOOD PROJECTS HERE
APK Studio - IDE for Reverse Engineering Android APKs
Car parking mobile apps fail to validate TLS certs (Dec., 2015)
DEF CON 23 - Packet Capture Village - Sam Bowne - Is Your Android App Secure (video)
iP-BOX: Breaking Simple Pass Codes on iOS Devices
Demonstration of Facebook\'s Android App Certificate Pinning--Using a Trusted Proxy CA
LTE Security � How Good Is It? (NIST, 2015)
android - How to avoid reverse engineering of an APK file? - Stack Overflow
Summary to prevent APK decompiler tool, two packing etc._Android_Programering
Checkey: test signatures and detect malware for your installed Android apps
Apple can comply with the FBI court order -- VERY INTERESTING RE: SECURE ENCLAVE
Two Charts That Demonstrate One Of Android\'s Big Security Problems (Feb. 2016)
Remote Code Execution in the Baidu Browser for Android -- USEFUL MITMPROXY TIPS
HOW TO BUILD YOUR OWN ROGUE GSM BTS FOR FUN AND PROFIT
Re-using signatures on modified Android apps!
WWDC 2016: Apple ramps up privacy - now all iOS apps must encrypt web connections by year end
Proportion of Vulnerable Android Devices
This malware pretends to be WhatsApp, Uber and Google Play
iOS Security iOS 9.3 or later
Android N is going to make it difficult for security testers using interception proxy tools like Burp Suite/ZAP
How to Factory Reset a Chromebook (Even if It Won't Boot)
Fake Android Prisma Apps Containing Malware Downloaded over 1.5 Million Times from Google Play Store (Aug 3, 2016)
SQLmap POST request injection
obfuscation | Android Security
Protect Your Java Code - Through Obfuscators and Beyond
How to avoid certificate pinning in the latest versions of Android
Bytecode Viewer - Java & Android APK Reverse Engineering Suite/Tool
Kwetza: infecting android applications -- MAKE INTO PROJECT
Genymotion 2.0 Emulators with Google Play support
How To Download Incompatible Apps In Any Android
US government says it's now okay to jailbreak your tablet and smart TV (from 2015)
Reverse Engineering iOS Applications (from 2014)
DVIA (Damn Vulnerable iOS App) - A vulnerable iOS app for pentesting
iOSAppReverseEngineering � GitHub
Reveal - Runtime view debugging for iOS & tvOS apps & extensions
Inspecting iOS Applications with Reveal
Reverse-Engineering iOS Apps: Hacking on Lyft
Installation � theos/theos Wiki � GitHub
Apple File Conduit "2" � Cydia
iFunbox | the File and App Management Tool for iPhone, iPad & iPod Touch.
Ch 1t: How to Sideload iOS Apps onto iPhone & iPad from Xcode
Ch 1u: Android Fragmentation Report August 2015 - OpenSignal
Ch 1v: iOS Version Stats - David Smith
Ch 1w: Dashboards | Android Developers
Ch 2i: What Is Femtocell Technology in Cellular Networks?
Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax. -- TRY FOR PROJECTS
Unroot a Genymotion device
Whirlwind Tour of ARM Assembly
Android ransomware attacks have grown by 50 percent in a year (2-21-17)
Ch 4z75: 99.6 percent of new smartphones run Android or iOS (2-16-17)
Ch 4z76: BlackBerry's global market share just fell to 0% (Feb 2017)
Ch 4z77: Which Android runs which Linux kernel?
Ch 4z78: Android's "Secure Enclave" / Private Content and Strong Encryption
System Log - The iPhone Wiki
Hacking Unicorns with Web Bluetooth -- USEFUL FOR ANDROID PROJECTS
Ch 5h: New ransomware threatens Android devices (Aug, 2016)
Ch 5i: MalwareBytes Mobile Malware Report 2017
Ch 5j: RSA 2017: SophosLabs report examines Top 10 Android malware
Ch 6k: Mobile Top 10 2016 - OWASP
Ch 5k: Google Android Security 2015 Year In Review
Ch 5l: Choosing a Membership - Support - Apple Developer
Ch 5m: Get Started with Publishing | Android Developers
Ch 5n: Average Apple App Store Review Times
Ch 5o: How long does it typically take to publish an app on the Google Play Store?
Mass Hack of Cell Phones Ensnares Washington, D.C., Area (Mar., 2017)
Android Security Is Better But Still Has a Long Way to Go (Mar. 2017)
Ch 6l: SOAP Examples
Ch 6m: Ajax/jQuery.getJSON Simple Example -- SitePoint
Ch 6n:: Basic REST Concepts
iTunes 64-bit driver
Awesome Android Reverse Engineering Tools
Android-OpenDebug: Make any application debuggable
Debugging Apps on Android Emulator Using GDB
Where is the best place to store a password in your Android app?
java - What does "L", "[" and ";" mean in smali code?
android - Is there a way to get the source code from an APK file?
Using Cryptography to Store Credentials Safely--recommends plaintext storage in 2013
Ch 9w: Android Pay vs Google Wallet (2016)
Ch 9x: Are Apple Pay & Android Pay Safe? Security & Mobile Wallets
Ch 9y: The Android Pay details Google didn't tell you
Ch 9z: How payments work - Android Pay Merchant Help
Ch 9z1: Samsung Pay: What you need to know (FAQ)
Ch 9z2: Apple Pay most popular mobile payment service among US retailers, survey finds (2017)
Ch 9z3 CurrentC--retailers' defiant answer to Apple Pay--will deactivate its user accounts (2016)
APKTool, make me a logcat sandwich
Android app disassembling, modification and reassembling | floyd's
IGLogger/iglogger_for_APKTOOLv2.smali <--FORK THAT WORKS FOR apktool 2
How to use the Android Keystore to store passwords and other sensitive information
Securely Storing Secrets in an Android Application
Packet Capture - Android Apps on Google Play -- MITMs SSL CONNECTION
Android-SSL-TrustKiller: Bypass SSL certificate pinning for most applications
Introspy-iOS: Security profiling for blackbox iOS
How to start Reverse Engineering on Android Application--GOOD PROJECTS
Top Android Remote Administration Tools (RATs) of 2018
How I hacked modern Vending Machines -- USEFUL ANDROID TRICKS
Basic iOS Apps Security Testing -- Jailbreaking iOS 11
iOS 12 Manual MDM Enrollment Changes (IBM MaaS360)
Apple Privacy Violations Examples (thread)
Ch 1a: Mobile OS market share in the U.S. 2018
Ch 1a: Mobile OS market share in the U.S. 2018

Links for Chapter Lectures

Other Links

Kindle Hacking

USB Hacking

Baseband Hacking

Miscellaneous

New Links