10 min read
Android Certificate Pinning Done Right
Certificate pinning on Android with Network Security Config and OkHttp: which key to pin, why you need a backup pin, and how to rotate keys without locking users out.
Computer scienceTürkçe oku
Computer science
Android architecture, Kotlin, mobile security, and what production taught me.
15 articles, newest first
14 min read
Modularizing Android Apps: Feature, Core and Data Boundaries
Splitting an Android app into :app, :feature, :core and :data modules: dependency direction, api vs implementation, convention plugins, Hilt and navigation across modules.
Computer scienceTürkçe oku
12 min read
Why NFC Reads Fail on Android (and How to Recover)
Why NFC reads drop on Android, what TagLostException actually tells you, and how to recover safely: reader mode flags, IsoDep timeouts and a fresh BAC/PACE session.
Computer scienceTürkçe oku
10 min read
BAC vs PACE: Understanding eID Access Control
How BAC derives its keys from the MRZ, why that allows offline brute force, what PACE does differently, and how an Android reader picks between them with JMRTD.
Computer scienceTürkçe oku
9 min read
Incremental Jetpack Compose Migration: Living With Views
Moving a View-based Android app to Compose screen by screen: ComposeView and AndroidView, one shared theme, state at the boundary, RecyclerView, nested scrolling and tests.
Computer scienceTürkçe oku
11 min read
Generating Android Navigation Graphs with KSP
Generating a Navigation Compose graph from a @Destination annotation with KSP and KotlinPoet: the processor, typed route arguments, the aggregating flag and the one-module limit.
Computer scienceTürkçe oku
12 min read
Building My Own Webmail with Next.js, Cloudflare and Docker
How my single-user webmail works: a Cloudflare Email Worker for inbound mail, Brevo for outbound, plain JSON files for storage, and Next.js in Docker on a VPS.
Computer scienceTürkçe oku
11 min read
Passive Authentication: Verifying eID Document Integrity
How Passive Authentication checks eID data on Android: the SOD and its data group hashes, the CSCA trust chain and CRLs, and what it cannot prove.
Computer scienceTürkçe oku
11 min read
Reading an eID chip on Android: NFC, APDU and data groups
How an eID chip is read on Android: reader mode and IsoDep, APDUs, BAC/PACE and secure messaging, data groups and Passive Authentication. Notes from building an eID SDK.
Computer scienceTürkçe oku
On Medium
SecureCheck: A Production-Ready Android Security Toolkit for Real-World Threats
A production-ready Android security toolkit for real-world threats: root and tamper detection, integrity checks and the trade-off behind each signal.
Computer scienceTürkçe oku
On Medium
Goodbye to Repetitive Tasks: A Bot That Updates and Publishes My CV Automatically
There are many tasks we repeat throughout the day without even noticing. They seem small, but over time they accumulate, drain our mental…
Computer scienceTürkçe oku
On Medium
✨ Aspectify: A Modern AOP Framework for Android and Kotlin World
An open-source AOP framework that pulls cross-cutting concerns like logging, retry and caching out of your business logic with simple annotations.
Computer scienceTürkçe oku
13 min read
From RxJava to Kotlin Coroutines: Modern Android Development
What I learned moving a project from RxJava to Kotlin Coroutines: migration basics, CoroutineScope and Dispatcher management, throttleFirst/collectFlow extensions and error handling.
Computer scienceTürkçe oku
10 min read
From onBackPressed to OnBackPressedDispatcher: A New Era in Android Back Handling
How OnBackPressedDispatcher fixes the code duplication, lifecycle and memory-leak problems of onBackPressed, with Activity and Fragment examples and Kotlin extension functions.
Computer scienceTürkçe oku
9 min read
Computer Engineering: Diving Deep and into the Software World
How I ended up in computer engineering instead of medicine, and what the software world really looks like from the inside.
Computer scienceTürkçe oku