Ed Holloway-George
where else to find them
website:https://spght.dev
bluesky:spght.dev
mastodon:@spaghetticode@androiddev.social
linkedin:edgeorge
speakerdeck:sp4ghetticode
what they talk about
all 4 in the filters
where they keep going back
- droidcon London4 editions2022–2025
- AndroidMakers by droidcon3 editions2024–2026
on a stage with
never shared a talk
who talks about the same things
- Mohamed Kerroumi2 talks
- Pat Shueh3 talks
- Dario Incalza2 talks
- Ed George2 talks
- Dwayne McDaniel14 talks
- Ana Baotić12 talks
| title | conference | date |
|---|---|---|
| Going Beyond Obfuscation: Advanced Techniques for Protecting Android Apps | AndroidMakers by droidcon 2026 | 2026-04-09 |
Shows concrete defenses: use R8/ProGuard or DexGuard for obfuscation, detect tampering by checking CRC hash of classes.dex and validating signatures from the… | ||
| Advanced Techniques for Protecting Android Apps | droidcon London 2025 | 2025-10-30 |
Shows concrete defenses: compute a CRC check on classes.dex at startup and block launch if it differs; verify runtime signing fingerprints via the Gradle… | ||
| How to keep your app's secrets, secret | AndroidMakers by droidcon 2025 | 2025-04-10 |
Claims that about 55% of apps contain hard‑coded secrets, ~30% use Firebase and ~5% of those expose data, drive concrete fixes: use the official Gradle secrets… | ||
| [REDACTED]: How to keep your app's secrets, secret | droidcon London 2024 | 2024-10-31 |
Claim: roughly 55% of mobile apps have hard‑coded secrets; about 30% use Firebase and ~5% of those expose data; ~0.5% leak AWS keys. Practical fixes shown: run… | ||
| How to stop the ‘Gradle Snatchers’: Securing your builds from baddies | AndroidMakers by droidcon 2024 | 2024-04-25 |
Covers real incidents: a 2018 repo spoofing where a malicious artifact impersonates a popular library, and a 2022 Gradle Wrapper compromise observed on a… | ||
| How to stop the ‘Gradle Snatchers’: Securing your builds from baddies | Droidcon London 2023 | 2023-10-26 |
Shows how Gradle dependency verification actually works: generate verification-metadata.xml, use SHA-256 checksums and PGP signatures to catch impostors like… | ||
| How to stop the ‘Gradle Snatchers’: Securing your builds from baddies | droidcon Berlin 2023 | 2023-07-05 |
Example: a 2018 dependency from JCenter masquerades as Jake Wharton and adds INTERNET access, and a 2022 incident injects a malicious Gradle wrapper into a… | ||
| How to become your app's 'security champion'. | droidcon London 2022 | 2022-10-27 |
Argues that mobile security matters now—3 billion Android devices, ~$2B stolen in crypto this year, 70% of fraud via mobile—and gives concrete starter steps… | ||
| nothing matches | ||