16 / 17 - Android Flashcards
What is AOSP?
Android Open Source Project (AOSP) - An initiative to guide the development of the Android platform.
What is the Open Handset Alliance?
Coalition of different partners. Representation from different interests including mobile network operators, handset manufacturers, semiconductor and software vendors.
What is the latest Android version and what is its name?
What is the Short Build Code?
Version: 10.0
Name: No code name
Short Build Code: FRF85B
What version supports full disk encryption?
5.0 (Lollipop)
What version supported enhanced security features (boot loader) incl. fingerprint reader?
6.0 (Marshmallow)
What version supported File Based Encryption?
7.0 (Nougat)
What version introduced Metadata encryption?
9.0 (Pie)
What are the five layers of Android?
- Applications
- Android Framework
- Native Libraries / Android Runtime
- HAL (Hardware Abstraction Layer)
- Linux Kernel
Explain the high level boot sequence?
- System Start
- Boot loader
- Linux kernel
- init process
- Zygote and Dalvik
- The Sytem Server
What is verified boot?
Verified boot is a boot sequence where each piece of software in the sequence must be authenticated by the software that was previously verified. The aim of verified boot is to prevent modified, or unauthorized code being installed and run on a mobile device.
In what version was app request introduced?
6.0
What are the four permission levels?
- Normal
- Dangerous
- Signature
- Signature / System
When was the first Android publicaly available?
2008
What is ADB and ADBD?
ADB - Android Debug Bridge
ADBD - Android Debug Bridge Daemon
Enabling USB debugging starts the Android Debug Bridge (ADB) which facilitates communication between the Android device and examination machine. This enables the Android Debug Bridge Daemon (ADBD) to allow a Logical data extraction. Available from v4.2.2 or higher.
What is MTP / PTP?
MTP: Media Transfer Protocol
PTP: Picture Transfer Protocol
What means “Root”?
This is a procedure to gain super user privileged access to the root directory of the system.
What are the user lock options?
PIN, Password, Pattern, Face Unlock or Fingerprint Unlock
Pattern stored as SHA 1 hash value stored in /data/system/gesture.key file. Password/PIN stored as SHA 1 hash value stored in /data/system/pc.key file.
Android Pattern Recovery: What is the correct swipe pattern for the database entry: [6, 3, 4, 5, 8]?
7,4,5,6,9
FBE device offers users two application storage areas. Which ones?
- Credential Encrypted (CE) storage => PIN code needed.
- Device Encrypted (DE) storage => for direct boot.
Which version introduced adoptable storage?
Android 9
Name the common Android partitions?
- /boot
- /system
- /recovery
- /data
- /cache
- /misc
Name the common file systems?
- YAFFS2 /
- JFFS2
- EXT (Standard FS used by Android)
- FAT
- F2FS
- RFS
Explain the SQLite journal file?
The rollback journal has the same name as the SQLite database but with a “-journal” appended. It is the rollback journal for a database.db. When a data transaction is being created, it writes the data to the rollback journal file and to the database.db. Upon successful completion of the transaction with the contents, the journal file (or their entries) gets deleted.
Explain the SQLite Write Ahead Log?
Files ends with *.db-shm and *.db-wal. The write ahead log method operates by writing a copy of the browser2.db into the browser2.db-wal file. The original database content remains in the browser2.db and changes such as additions or deletions are made to the browser2.db-wal file. This ensures that if crash was to happen to the browser2.db-wal file, the original data would still be fine as it is stored in the browser2.db file. All transactions of data are appended or committed to the wal-file which increases in size over time. At some point in time, the wal-file will reach a certain predetermined size called a checkpoint and then an operation is performed to write all of the new transactions to the original . DB file. Typically, this occurs when the wal-file reaches a threshold of 1000 pages.