Hello Android enthusiasts! Spring is just around the corner and hopefully here soon, so join us for our Frühlings Android GDG Meetup at Google. Warm up with great talks, tasty snacks, and cozy drinks while connecting with the community!
INFO: As usual Google requires registration with first and last name. Please send them to us until one day before the event as Google requests the list in advance.
Agenda:
18:00: Doors open, Mingling and Food
18:30: Intro & Welcome note
18:45 : Juhani Lehtimäki - Usability in Open Source
19:15 : Julius Fischer - How to hack your app: basics of penetration testing
19:55 : Engin Deniz Usta - 8 Players, 0 Hardware Decoders: Rendering a Video Grid in Compose
-------------------------------------------------------
🗣️ How to hack your app: basics of penetration testing by Julius Fischer
In this talk we introduce three widely used mobile security tools, MobSF, Burp Suite, and objection, that help you quickly assess your app for vulnerabilities. Through one static analysis demo with MobSF and two short penetration testing demos, we show how these tools complement each other and how you can combine them effectively in penetration testing workflows. We also highlight how much security value you can already gain with relatively little effort or specialized knowledge. Because these tools are purpose-built for mobile analysis, they allow you to uncover weaknesses in your app without needing to be a full-time security expert.
🗣️ 8 Players, 0 Hardware Decoders: Rendering a Video Grid in Compose by Engin Deniz Usta
Your video grid runs like butter on a Pixel. Ship it. Then a Samsung A14 gives you nothing but black frames and sadness - welcome to hardware codec limits. This talk is about running a pool of concurrent Media3 ExoPlayer instances on zero hardware decoders in a Compose LazyVerticalStaggeredGrid, and somehow making it work. We'll cover software-only MediaCodecSelector, player pool recycling, scroll-driven pause/resume, the TextureView vs SurfaceView trap, and a two-phase prefetch pipeline - all from production code and real device pain.
