Ahmad-IB Security Research Journalhttps://ahmadib.onrender.com/Independent field notes on Android, API and application security by Ahmad Ibrahim.enMon, 26 Oct 2026 00:00:00 GMTDesigning redacted, reproducible APK evidence reportshttps://ahmadib.onrender.com/articles/redacted-apk-evidence-reports.htmlhttps://ahmadib.onrender.com/articles/redacted-apk-evidence-reports.htmlSource-backed walkthrough of Android static-analysis evidence reports, stable instance IDs, selective masking, safe file export and manual validation limits.Mon, 26 Oct 2026 00:00:00 GMTAndroid security toolingCybersecurity intelligence brief — 17 October 2026https://ahmadib.onrender.com/articles/intelligence-2026-10-17.htmlhttps://ahmadib.onrender.com/articles/intelligence-2026-10-17.htmlSource-verified Android threat developments, API authorization analysis, and one clearly unvalidated research hypothesis.Sat, 17 Oct 2026 00:00:00 GMTAndroid securityBuilding an Android security toolkit around evidence, not alertshttps://ahmadib.onrender.com/articles/android-security-toolkit.htmlhttps://ahmadib.onrender.com/articles/android-security-toolkit.htmlWhy a small, reproducible APK analysis CLI is useful—and why its observations must not be confused with confirmed vulnerabilities.Thu, 15 Oct 2026 00:00:00 GMTOpen-source toolingExported Android components: exposure is not exploitabilityhttps://ahmadib.onrender.com/articles/exported-android-components.htmlhttps://ahmadib.onrender.com/articles/exported-android-components.htmlA careful way to assess exported activities, services, receivers and content providers without overstating configuration risks.Thu, 15 Oct 2026 00:00:00 GMTAndroid securityThe authorization boundary does not live inside the mobile apphttps://ahmadib.onrender.com/articles/api-authorization-boundaries.htmlhttps://ahmadib.onrender.com/articles/api-authorization-boundaries.htmlUnderstanding the difference between hiding an interface action and enforcing resource permissions on the server.Thu, 15 Oct 2026 00:00:00 GMTAPI security