Hacker News Reader

From skimming the papers briefly* it looks it's finding errors in policy-scoping and other violations outside of expected permission branches.

The thesis isn't linked on the site but I found it here [0] http://www.cs.berkeley.edu/~jnear/ [1] https://dspace.mit.edu/handle/1721.1/99841

View on HN

I've been working through the paper for almost two hours now. I'm not an expert on static analysis, so I don't know how much of the information in here is novel, but the paper does a great job of concisely conveying a lot of interesting ideas. His model for representing data exposures is beautiful in its simplicity, and I think it could almost trivially be adapted for dynamic analysis too.

Definitely worth a skim in my opinion.

Thank you!

Reply on news.ycombinator.com