Leaf-Jump Meetup

Wird ins Deutsche übersetzt…

Hello Droiders! Time to leaf your desk behind and jump into November with us! Our Leaf Jump Android GDG Meetup at Netlight brings great talks, tasty snacks, and warm drinks, all with the best community around. **Agenda**: * 18:00: Doors open, Mingling and Food * 18:25: Intro & Welcome note * 18:40: Sergio Sastre Florez - Composable Preview Driven Development with AI: TDD-fying your UI pAInlessly! * 19:15: Julius Fischer & Benedikt Löbbeke - Pentesting AI-Powered Mobile Apps: The New Attack Surface * 20:00: Enrique Lopez Mañas - Securing Android SDKs: A Defense-in-Depth \-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\- 🗣️ *Composable Preview Driven Development with AI: TDD-fying your UI pAInlessly!* by Sergio Sastre Florez Revisiting Composable Preview Driven Development: a modern workflow where Previews, screenshot tests, and TDD work together, now supercharged with AI. In this talk, you’ll learn: • Practical tricks to implement Compose UIs safer & faster • Why designing  @Preview  APIs before AI code generation leads to cleaner, more maintainable UI • How to turn  @Previews  into fast automated screenshot tests • How to use those tests with TDD to guide AI when generating, adjusting, and refactoring UI confidently 🗣️ *Pentesting AI-Powered Mobile Apps: The New Attack Surface* by Julius Fischer & Benedikt Löbbeke Mobile apps are shipping AI features faster than security testing can keep up. Embedding or calling a language model opens new failure modes: leaked data, steerable behavior, secrets where they shouldn’t be. This talk covers pen-testing AI-enabled mobile apps. Good news: your Android skills carry over, from reverse engineering an APK to analyzing network traffic. What’s genuinely new is prompt injection, with no equivalent in traditional app security and few reliable defenses. Live demos show both sides: manipulating an AI-enabled app’s behavior and recovering sensitive data from it. No machine learning background needed. You’ll leave knowing where AI features fail and how to start testing your own app. 🗣️ *Securing Android SDKs: A Defense-in-Depth* by Enrique Lopez Mañas A practical, defense-in-depth roadmap for hardening Android SDKs against reverse engineering and fraud, layering obfuscation, HMAC-signed requests, Play Integrity attestation, and short-lived server-issued tokens in place of static API keys.