Blog

Can you spoof getCallingUid()?

It's the question I get every time Binder comes up, and for years my answer was basically 'nah, the kernel handles it', which is what you say when you don't actually know. So I followed one call down to /dev/binder to find out where that UID really comes from.