Log - It’s Big, It’s Heavy, It’s Filled with Personal Data! Measuring the Logging of Sensitive Information in the Android Ecosystem

Explore a 14-minute conference talk from USENIX Security '23 that investigates the logging of sensitive information in the Android ecosystem. Discover how researchers examined the shared system log on Android devices, which collects data from all system components and apps. Learn about the security mechanisms in place, the exceptions for privileged apps, and Google's advice against logging sensitive information. Gain insights from a field study revealing the prevalence of user-identifying information in device logs, including how app usage can inadvertently disclose personal details. Examine findings on default logging practices across different smartphones, preinstalled apps with system log access, and the privacy policies of manufacturers collecting system logs. Delve into the implications of these practices for user privacy and data protection in the Android ecosystem.

USENIX Security '23 - Log: It’s Big, It’s Heavy, It’s Filled with Personal Data! Measuring the...