Screen Leakage

Background

Backing to 2015, Google introduced the MediaProjectionManager API in Android Lollipop, gave applications the ability to record the device’s screen. While this feature is incredibly powerful, it also raises some privacy and security concerns. Therefore, Android handle screen cast with caution, for example

• SystemUI displays a confirm dialog to warn user while initiating the cast recording session,

• a casting indicator is always on the StatusBar to notify user that they are been watched,

• a togglable Screen Cast Tile would …

android android security api applications bugbounty-writeup device dialog feature google privacy privacy and security record recording screen security security concerns session vulnerability