What You Can Do with an Accessibility Service

on YouTube ↗28m

" summary

Demonstrates that Android AccessibilityService APIs (getRootInActiveWindow, find nodes by id, performAction ACTION_SET_TEXT and ACTION_CLICK) allow reading the full view hierarchy, programmatically entering text and clicking buttons. Builds demos: a chat bot that auto-fills the input with current Unix ms and sends when the last digit is zero, and a runtime-permission demo that programmatically taps “Allow,” showing automatic SMS sending, camera/storage access and silent data exfiltration are possible. Notes that Google Play policy now bans AccessibilityService uses that are not for assistive purposes.

AI-written summary · about

" chapters (7)

1. 0:00Introduction
2. 3:09Accessibility Service basics
3. 6:40View manipulation APIs
4. 13:28Abuse cases and high permissions
5. 14:34Chat auto-send demo
6. 20:09Runtime permission abuse
7. 24:44Summary

" related talks

• 28mExploring Android Accessibility MalwareTamir Daniel · droidcon Berlin 2024
• 33mDemystifying Android accessibility developmentPhil Weaver, Isha Bobra, Qasid Sadiq · Google I/O 2019
• 12mThe Secrets of Android AccessibilityVegard Haugstvedt · Mobile Era 2017
• 40mWhat’s new in Android accessibilityBrian Kemler, Victor Tsaran, Maya Ben Ari, Melilssa Barnhart · Google I/O 2018
• 38mYes You Can! Improving AccessibilityYuri Ogura · DroidKaigi 2023
• 37mAndroid accessibility made easyVijay Sailappan · 360|AnDev 2017
• 39mEasy Android AccessibilityLyla Fujiwara, Shailen Tuli · droidcon NYC 2019
• 37mAccessibility on Android in 2019Léna Ndiaye · DevFest du bout du monde 2019