I think the Problem could be that most automated sandboxes use the monkey to trigger malicious behaviour. So this would be a perfect anti-vm technique.
Oliver Hill <olly.sp...@gmail.com> schrieb: >As far as I can tell, isUserAMonkey() is used to stop the Monkey doing >something bad during the test, like encrypting the phone or setting up a lock >screen: in those cases, it just says "the button was pressed successfully" but >doesn't actually carry out the action. > >I don't think it really has any actual security implications at all, it's just >used to stop the monkey doing something stupid. I'm not sure what you mean >about trusting input: are you thinking someone might fake being a monkey? > >On Monday, 5 August 2013 20:17:47 UTC+1, Keith Makan wrote: > > >Hi Guys, > >I've been wondering about this strange method in the ActivityManager Class >ActivityManager.isUserAMonkey() >Relax, I know what's for, basically to make sure that an application can >differentiate between touch, text or other input coming >from the user and input coming from the MonkeyRunner testing Framework. Lately >I've been testing a couple very popular apps for this though >no one really seems to care 0_o... > >My question is, are there any security related concerns/issues around not >making this call, before trusting input too much? > >Regards and Thanks >k3 > >-- >You received this message because you are subscribed to the Google Groups >"Android Security Discussions" group. >To unsubscribe from this group and stop receiving emails from it, send an >email to android-security-discuss+unsubscr...@googlegroups.com. >To post to this group, send email to android-security-discuss@googlegroups.com. >Visit this group at http://groups.google.com/group/android-security-discuss. >For more options, visit https://groups.google.com/groups/opt_out. > > -- You received this message because you are subscribed to the Google Groups "Android Security Discussions" group. To unsubscribe from this group and stop receiving emails from it, send an email to android-security-discuss+unsubscr...@googlegroups.com. To post to this group, send email to android-security-discuss@googlegroups.com. Visit this group at http://groups.google.com/group/android-security-discuss. For more options, visit https://groups.google.com/groups/opt_out.
