The Android Platform Security Model (2023) · HackerPapers discussions

The Android Platform Security Model (2023) — mentioned by surajrmal

Sun, 26 Jul 2026 06:02:28 GMT

It sounds like you are just at odds with the android security model: https://arxiv.org/pdf/1904.05572

Paper and discussion history. A mention is not an endorsement.

The Android Platform Security Model (2023) — HN submission

Wed, 06 May 2026 10:49:15 GMT

The Android Platform Security Model (2023)

2 points; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.

The Android Platform Security Model (2023) — mentioned by Andromxda

Thu, 05 Mar 2026 22:31:44 GMT

Of course the topic as a whole is much more complex than that, but I'll try to summarize it. Android has 3 systems of access control [1][2]: - Discretionary Access Control, i.e. the standard Unix file permissions - Mandatory Access Control, implemented in the form of the SELinux and YAMA LSMs (GrapheneOS stopped using YAMA in the 2024031400 release and replaced it with advanced SELinux policies) - Android permissions which have to be disclosed in the AndroidManifest.xml, and most of the time need to be granted by the user at runtime Root simply bypasses ALL of these security mechanisms. This…

Paper and discussion history. A mention is not an endorsement.

The Android Platform Security Model (2023) — HN submission

Fri, 04 Apr 2025 19:25:19 GMT

The Android Platform Security Model v3 (2023)

3 points; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.

The Android Platform Security Model (2023) — mentioned by ignoramous

Sun, 30 Mar 2025 14:18:46 GMT

A more recent (2023) sandboxing + isolation overview by the Android team: https://arxiv.org/html/1904.05572v3/ (section 4.3)

Paper and discussion history. A mention is not an endorsement.

The Android Platform Security Model (2023) — mentioned by gradeless

Wed, 02 Mar 2022 13:20:45 GMT

Theres a lot more to the android app sandbox than just running processes as seperate users. Theoretically something similar could be implemented in some other 'typical linux system'. It would be a huge undertaking. If you are thinking about security need to consider not only malicious apps, but possible attack vectors opened up by any application. This paper is a couple of years old, it explains how it all works on Android https://arxiv.org/abs/1904.05572

Paper and discussion history. A mention is not an endorsement.

The Android Platform Security Model (2023) — mentioned by lolinder

Tue, 01 Mar 2022 02:26:56 GMT

There's a paper by several Google employees describing it. I haven't read it, just skimmed and searched keywords, but near as I can tell it doesn't mention anything like what the OP thinks it does: https://arxiv.org/abs/1904.05572 See my other comment for what I did find, which is exactly the opposite of what OP says: https://news.ycombinator.com/item?id=30507713

Paper and discussion history. A mention is not an endorsement.

The Android Platform Security Model (2023) — mentioned by lolinder

Tue, 01 Mar 2022 01:03:46 GMT

Do you have a citation for your claims about the Android security model? The only things I can find about app stores in the paper by Google[0] run directly counter to your idea: > Android explicitly supports installation of apps from arbitrary sources, which led to the development of different app stores and the existence of apps outside of Google Play. And this: > Both users and developers are part of an open ecosystem that is not limited to a single application store. Central vetting of developers or registration of users is not required. And as far as signing goes: > In order to ensure…

Paper and discussion history. A mention is not an endorsement.

The Android Platform Security Model (2023) — HN submission

Sat, 04 May 2019 22:00:57 GMT

The Android Platform Security Model

1 point; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.

The Android Platform Security Model (2023) — HN submission

Tue, 16 Apr 2019 18:17:17 GMT

The Android Platform Security Model

3 points; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.

The Android Platform Security Model (2023) — HN submission

Sat, 13 Apr 2019 13:21:21 GMT

The Android Platform Security Model [pdf]

2 points; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.