SSL Pinning in Android

In this post I would like to explain how to do the SSL Pinnig from Android. First of all we will get a little idea about what is SSL and Pinnig means. In this post I did referred the OWASP (Open Web Application Security Project) page, where we can gain knowledge in common security risks of our software. Mostly in client-server communication, we uses TCP/IP protocol. Based on TCP/IP there are application layer protocols, which are well known to the world(Such as HTTP, SMTP, FTP etc…) Widely used client-server communication protocol is HTTP....

March 16, 2015 · 5 min · 1052 words · Dulan Dissanayake

Android Linkedin SDK 1.0.0 Example

In a previous post, I have explained how to access the Linkedin API’s using Scribe. But luckily Linkedin have introduced their Mobile SDK for Android recently. This will save lot of times for developers and hope in the future will have lot of functions over the SDK. In this post I’m going to give some hints and important steps to integrate Linkedin SDK for existing linkedin integrated(Using Scribe) application. When using Scribe for OAuth authentication, linkein returned us an AccessToken and we saved that in shared preferences for future use....

March 8, 2015 · 2 min · 374 words · Dulan Dissanayake

Secure Android Application Development Tips

In Android Operating system, there are lots of security features which will protect your applications. The common security threat of Man in the middle attack, will help attackers to initiate an attack from a mobile application. This may of a small mistake like adding log of sensitive data. After development of an application it is better to do a Penetration testing. There are lots of tools and services for penetration testing and vulnerability testing....

February 28, 2015 · 6 min · 1263 words · Dulan Dissanayake

Android Linkedin API with OAuth Authentication (Using Scribe-Java Library)

As Linkedin is one of the professional social media network, most of us needs to access there web services to collect data. In this post I would like to give simple examples on how to get logged in user information such as email, full name, friends list. And I’m planning to update this post with the sending messages and share posts. There is no official SDK provided by the Linkedin developer support....

February 24, 2015 · 2 min · 325 words · Dulan Dissanayake

Android Event Bus Implementations using Otto

As android developers we face difficulties on decoupling different parts in android application. To overcome this difficulties, the Square has introduced an event bus for android called Otto. In this post I will demonstrate how to use Otto event bus with IntentServices in Restful android client. This code can be more optimized. This publish-subscribe style can be used to decouple many other components except the Services. This is just a sample implementation to demonstrate Event Bus concept with IntentService, except ResultReceiver usage with Services....

February 16, 2015 · 3 min · 482 words · Dulan Dissanayake