cybermilosz/android-keystore-audit

hi omg hiiii

My name is Miłosz _{^{(pronounced /ˈmi.wɔʂ/ or ME-wash; easy to remember as a personal hygiene joke)}}

Currently employed by WithSecure Consulting, where I primarily look after:

• Our mobile security service area
• The summer internship program in the UK
• UK university/student outreach

In my previous life, I was a teaching assistant at the University of Southampton; I still occasionally pick up odd jobs there.

current projects

• I'm one of the maintainers of the recently-revived drozer — a popular Android security tool. The drozer console and Android agent can be found here on GitHub
• I'm also working on several applications replicating vulnerabilities we've seen in the wild in iOS and Android apps

talks/blog posts

Stuff I did or helped with:

• eLinkSmart padlocks — a chain of vulnerabilities in a popular line of smartlocks could allow an attacker to easily unlock any lock
  • BSides London 2023 (talk recording) (slides) (abstract)
  • WithSecure Labs (blog post)
• Say "cheese"! [...] — a short explanation of Android app components and permissions, with a live demonstration of production devices with overly-permissive camera apps
  • BSidesLjubljana 0x7E7 (talk recording) (slides) (abstract)
  • AppSec Village (DEF CON 31) (workshop slides) (abstract)
• Sniffing keyboards (Turns out some of them stink) — a lighthearted talk about keyboard sniffing, and a suspected incident at a university that shall not be named
  • BSides Dublin 2023 (talk recording) (slides)

things i like

• Educational theory
• Mobile application/device security
• Internet of _^shThings devices
• Audio-visual equipment and integrations
• Retro gaming (ask me about my silly setup)