Aurimas Liutikas
@liutikas.net
Software engineer working on AndroidX at Google. Gradle Fellow. He/him
www.liutikas.net/blog-posts/
https://www.liutikas.net/talks/
www.liutikas.net/blog-posts/
https://www.liutikas.net/talks/
Reposted by Aurimas Liutikas
Reposted by Aurimas Liutikas
Pebble going fully open source is a big win for hardware preservation. ⌚️🔓 But for mobile devs, the real story is in the repo.
The new app is a pure KMP + Compose Multiplatform rewrite.
230k lines (Legacy Java/ObjC) ➡️ 37k lines (Kotlin)
Shipped in 6 months with just 2 devs 🔥
The new app is a pure KMP + Compose Multiplatform rewrite.
230k lines (Legacy Java/ObjC) ➡️ 37k lines (Kotlin)
Shipped in 6 months with just 2 devs 🔥
Good news! We open sourced the Pebble mobile app today -> github.com/coredevices/mobileapp Now all the software that powers your new Pebble is 100% open source. Read the full scoop on my blog ericmigi.com/blog/pebble-...
GitHub - coredevices/mobileapp
Contribute to coredevices/mobileapp development by creating an account on GitHub.
github.com
November 25, 2025 at 6:00 PM
Pebble going fully open source is a big win for hardware preservation. ⌚️🔓 But for mobile devs, the real story is in the repo.
The new app is a pure KMP + Compose Multiplatform rewrite.
230k lines (Legacy Java/ObjC) ➡️ 37k lines (Kotlin)
Shipped in 6 months with just 2 devs 🔥
The new app is a pure KMP + Compose Multiplatform rewrite.
230k lines (Legacy Java/ObjC) ➡️ 37k lines (Kotlin)
Shipped in 6 months with just 2 devs 🔥
Probably my favorite talk at Droidcon London 2026 was @stevepenna.bsky.social on rebuilding Pebble app.
The part that I really liked was the contrasting of the Android development and library ecosystem 11 years ago and today.
It was also nice to see AndroidX appreciation.
youtu.be/UOQMDkCsCSw?...
The part that I really liked was the contrasting of the Android development and library ecosystem 11 years ago and today.
It was also nice to see AndroidX appreciation.
youtu.be/UOQMDkCsCSw?...
Rebuilding Pebble: What a Difference a Decade Makes - Steve Penna | droidcon London 2025
YouTube video by droidcon & fluttercon
youtu.be
November 24, 2025 at 5:12 PM
Probably my favorite talk at Droidcon London 2026 was @stevepenna.bsky.social on rebuilding Pebble app.
The part that I really liked was the contrasting of the Android development and library ecosystem 11 years ago and today.
It was also nice to see AndroidX appreciation.
youtu.be/UOQMDkCsCSw?...
The part that I really liked was the contrasting of the Android development and library ecosystem 11 years ago and today.
It was also nice to see AndroidX appreciation.
youtu.be/UOQMDkCsCSw?...
Perfetto performance traces can be very intimidating. A talk by perf wizard @rahulrav.com makes it a tiny bit less scary.
youtu.be/WJHNBN_19F8?...
#performance #android
youtu.be/WJHNBN_19F8?...
#performance #android
A Busy Android App Developers' Guide to Perfetto - Rahul Ravikumar | droidcon London 2025
YouTube video by droidcon & fluttercon
youtu.be
November 23, 2025 at 11:56 PM
Perfetto performance traces can be very intimidating. A talk by perf wizard @rahulrav.com makes it a tiny bit less scary.
youtu.be/WJHNBN_19F8?...
#performance #android
youtu.be/WJHNBN_19F8?...
#performance #android
If you are hitting a bunch of Gradle configuration cache invalidations, you might find my post helpful
www.liutikas.net/2025/11/21/E...
#gradle
www.liutikas.net/2025/11/21/E...
#gradle
Everchanging CI - Isolating Configuration Cache Inputs
In the post Input to Your Inputs we discussed reducing inputs to the configuration cache (CC) to increase your CC hit rate. One scenario that we had to tackl...
www.liutikas.net
November 22, 2025 at 1:19 AM
If you are hitting a bunch of Gradle configuration cache invalidations, you might find my post helpful
www.liutikas.net/2025/11/21/E...
#gradle
www.liutikas.net/2025/11/21/E...
#gradle
Messing with Displate by @danlew42.bsky.social
Good lessons on things to avoid when building a service.
blog.danlew.net/2025/11/18/h...
Good lessons on things to avoid when building a service.
blog.danlew.net/2025/11/18/h...
Hacking Displate (For Fun!)
During the pandemic my weird vice/obsession became Displates (metal wall art hung up by magnets):
For me, part of the hobby was poking holes in their website. I’ve long stopped trying to give their d...
blog.danlew.net
November 21, 2025 at 4:40 AM
Messing with Displate by @danlew42.bsky.social
Good lessons on things to avoid when building a service.
blog.danlew.net/2025/11/18/h...
Good lessons on things to avoid when building a service.
blog.danlew.net/2025/11/18/h...
How often can you make something 30% faster with this little work? Please give this a try!
Don't ignore this tip! We've switched to using the optimized proguard file & shrinking resources in our latest release and have seen a massive drop in all performance related metrics, with slow app launch metrics dropping >30%. All from a 5 minute code change!
Run this and let me know the output:
`grep "dontoptimize" app/build/outputs/mapping/release/configuration.txt`
In case it's not empty, you definitely should watch this youtu.be/QqO2jZ-NZko?...
`grep "dontoptimize" app/build/outputs/mapping/release/configuration.txt`
In case it's not empty, you definitely should watch this youtu.be/QqO2jZ-NZko?...
November 20, 2025 at 3:59 PM
How often can you make something 30% faster with this little work? Please give this a try!
It's true. By the time we are in beta we are generally API stable unless there was a huge mistake requiring us to release a new beta with an API change.
jakewharton.com/you-should-u...
jakewharton.com/you-should-u...
com.android.support
November 19, 2025 at 3:18 PM
It's true. By the time we are in beta we are generally API stable unless there was a huge mistake requiring us to release a new beta with an API change.
jakewharton.com/you-should-u...
jakewharton.com/you-should-u...
If not DNS then it is always a bad config, this time it was a bad config.
blog.cloudflare.com/18-november-...
blog.cloudflare.com/18-november-...
Cloudflare outage on November 18, 2025
Cloudflare suffered a service outage on November 18, 2025. The outage was triggered by a bug in generation logic for a Bot Management feature file causing many Cloudflare services to be affected.
blog.cloudflare.com
November 19, 2025 at 2:14 AM
If not DNS then it is always a bad config, this time it was a bad config.
blog.cloudflare.com/18-november-...
blog.cloudflare.com/18-november-...
Reposted by Aurimas Liutikas
Um...Focus Friend is Google's...App...of the Year.
OF THE YEAR?!
Not like, in a category. But APP OF THE YEAR.
BRIA, LOOK WHAT YOU MADE!!! @bobabria.bsky.social
blog.google/products/goo...
OF THE YEAR?!
Not like, in a category. But APP OF THE YEAR.
BRIA, LOOK WHAT YOU MADE!!! @bobabria.bsky.social
blog.google/products/goo...
Google Play’s best apps, books and games of 2025
We’re announcing Google Play’s Best of 2025 awards, celebrating the best apps, games and books of the year.
blog.google
November 18, 2025 at 5:11 PM
Um...Focus Friend is Google's...App...of the Year.
OF THE YEAR?!
Not like, in a category. But APP OF THE YEAR.
BRIA, LOOK WHAT YOU MADE!!! @bobabria.bsky.social
blog.google/products/goo...
OF THE YEAR?!
Not like, in a category. But APP OF THE YEAR.
BRIA, LOOK WHAT YOU MADE!!! @bobabria.bsky.social
blog.google/products/goo...
It's a huge shame. Florida is a scary place for many.
I've been on the program committee for droidconNYC for a few years now and attendee for nearly decade. I understand why they felt like staying in NYC wasn't financially viable, but moving to Florida (let alone Orlando) is such a disappointing decision, especially for LGBTQ+ members of the community
November 18, 2025 at 3:43 PM
It's a huge shame. Florida is a scary place for many.
It is absolutely bonkers how Flock cameras have such poor security practices. They are all over the US. There is one 100 ft from my house. Thousands of them in the Bay Area (map here deflock.me/map) This is a dream for a hostile actor.
youtu.be/uB0gr7Fh6lY?...
#flock #security
youtu.be/uB0gr7Fh6lY?...
#flock #security
The Cameras Tracking You Are A Security Nightmare
YouTube video by Benn Jordan
youtu.be
November 16, 2025 at 5:32 PM
It is absolutely bonkers how Flock cameras have such poor security practices. They are all over the US. There is one 100 ft from my house. Thousands of them in the Bay Area (map here deflock.me/map) This is a dream for a hostile actor.
youtu.be/uB0gr7Fh6lY?...
#flock #security
youtu.be/uB0gr7Fh6lY?...
#flock #security
A fun talk on handling fun Unicode bugs in your app by @vladimirj.dev
One of my first bugs in Chrome was due to Turkish letters "i" and "ı" that need special handling when changing to upper vs to lower case.
youtu.be/CHRgrgCLaOE?...
#android #unicode
One of my first bugs in Chrome was due to Turkish letters "i" and "ı" that need special handling when changing to upper vs to lower case.
youtu.be/CHRgrgCLaOE?...
#android #unicode
November 16, 2025 at 5:05 AM
A fun talk on handling fun Unicode bugs in your app by @vladimirj.dev
One of my first bugs in Chrome was due to Turkish letters "i" and "ı" that need special handling when changing to upper vs to lower case.
youtu.be/CHRgrgCLaOE?...
#android #unicode
One of my first bugs in Chrome was due to Turkish letters "i" and "ı" that need special handling when changing to upper vs to lower case.
youtu.be/CHRgrgCLaOE?...
#android #unicode
To improve AndroidX release binary transparency we have made all of our release branches visible to the world.
E.g. collections: ci.android.com/builds/branc...
What that means is now you can go from a released version of a library to an exact buildId and the source tree state for that release.
E.g. collections: ci.android.com/builds/branc...
What that means is now you can go from a released version of a library to an exact buildId and the source tree state for that release.
November 10, 2025 at 8:08 PM
To improve AndroidX release binary transparency we have made all of our release branches visible to the world.
E.g. collections: ci.android.com/builds/branc...
What that means is now you can go from a released version of a library to an exact buildId and the source tree state for that release.
E.g. collections: ci.android.com/builds/branc...
What that means is now you can go from a released version of a library to an exact buildId and the source tree state for that release.
"my configuration time went down from ~1s per project to ~350ms per project."
@[email protected] was able to drastically speed up his project's configuration time.
mbonnin.net/2025-11-08_g...
A goalpost to reach: 100ms per project.
Where are you with your projects?
#gradle
@[email protected] was able to drastically speed up his project's configuration time.
mbonnin.net/2025-11-08_g...
A goalpost to reach: 100ms per project.
Where are you with your projects?
#gradle
Gradle debug recipes
Get insights into your Gradle build.
mbonnin.net
November 8, 2025 at 11:32 PM
"my configuration time went down from ~1s per project to ~350ms per project."
@[email protected] was able to drastically speed up his project's configuration time.
mbonnin.net/2025-11-08_g...
A goalpost to reach: 100ms per project.
Where are you with your projects?
#gradle
@[email protected] was able to drastically speed up his project's configuration time.
mbonnin.net/2025-11-08_g...
A goalpost to reach: 100ms per project.
Where are you with your projects?
#gradle
Reposted by Aurimas Liutikas
Sometimes you've got to celebrate the small wins.
Android Studio project wizard will add distributionSha256Sum entries to gradle/wrapper/gradle-wrapper.properties to make reduce your chances of getting a malicious Gradle distribution!
issuetracker.google.com/issues/26963...
#gradle #security
Android Studio project wizard will add distributionSha256Sum entries to gradle/wrapper/gradle-wrapper.properties to make reduce your chances of getting a malicious Gradle distribution!
issuetracker.google.com/issues/26963...
#gradle #security
Google Issue Tracker
issuetracker.google.com
November 6, 2025 at 9:28 PM
Sometimes you've got to celebrate the small wins.
Android Studio project wizard will add distributionSha256Sum entries to gradle/wrapper/gradle-wrapper.properties to make reduce your chances of getting a malicious Gradle distribution!
issuetracker.google.com/issues/26963...
#gradle #security
Android Studio project wizard will add distributionSha256Sum entries to gradle/wrapper/gradle-wrapper.properties to make reduce your chances of getting a malicious Gradle distribution!
issuetracker.google.com/issues/26963...
#gradle #security
Reposted by Aurimas Liutikas
The administration has pulled the plug on IRS Direct File, a tool that helped eligible taxpayers file for free. This decision comes despite Direct File’s immense popularity with its users.
Direct File won’t happen in 2026, IRS tells states
The free service that allowed taxpayers to file online directly with the IRS was used by hundreds of thousands of taxpayers in 2024 and 2025, who gave it high marks — although tax prep companies and R...
www.nextgov.com
November 6, 2025 at 6:04 PM
The administration has pulled the plug on IRS Direct File, a tool that helped eligible taxpayers file for free. This decision comes despite Direct File’s immense popularity with its users.
Reposted by Aurimas Liutikas
yup it's fully KMP/jpcompose and works great on Android and iOS!! But we're always interested in connecting with more KMP people to get help and tips.
November 6, 2025 at 12:39 AM
yup it's fully KMP/jpcompose and works great on Android and iOS!! But we're always interested in connecting with more KMP people to get help and tips.
A reason to upgrade to Gradle 9.2 if you are suffering from this issue.
Turns out this is fixed in Gradle 9.2 🎉
Kudos Anže Sodja for finding this issue. I'm now down to ~7s for ~20 projects, we're getting there!
github.com/gradle/gradle/pull/34836
Kudos Anže Sodja for finding this issue. I'm now down to ~7s for ~20 projects, we're getting there!
github.com/gradle/gradle/pull/34836
Don't OOM when many unrelated transforms are registered with no solution by jvandort · Pull Request #34836 · gradle/gradle
The artifact transform traversal algorithm short-circuits when it finds the shortest solution. However, if there is no solution, it will traverse the entire transform graph attempting to find a sol...
github.com
November 4, 2025 at 4:35 PM
A reason to upgrade to Gradle 9.2 if you are suffering from this issue.
If you are using Gradle and your per project configuration time (total configuration time / number of subprojects) is more than 100ms there is likely something suboptimal in your build set up.
#gradle
#gradle
November 1, 2025 at 12:58 PM
If you are using Gradle and your per project configuration time (total configuration time / number of subprojects) is more than 100ms there is likely something suboptimal in your build set up.
#gradle
#gradle
Reposted by Aurimas Liutikas
Some guy got in an argument with me about the impact of AI malware. He cited a MIT paper claiming "80% of ransomware attacks are AI powered". I glanced over it and burst out laughing, but couldn't be bothered to debunk it. My friend on the other hand, could. He roasted it so hard that MIT deleted it
Security Community Slams MIT-linked Report Claiming AI Power...
Experts push back on new claims about AI-driven ransomware, warning that hype and sponsored research are distorting how the threat is understood.
socket.dev
October 31, 2025 at 10:10 PM
Some guy got in an argument with me about the impact of AI malware. He cited a MIT paper claiming "80% of ransomware attacks are AI powered". I glanced over it and burst out laughing, but couldn't be bothered to debunk it. My friend on the other hand, could. He roasted it so hard that MIT deleted it
You might have seen CVE-2025-36852 that affects the use of Gradle remote build cache. I wrote a short post of when to use and when not to use remote cache
www.liutikas.net/2025/10/28/C...
#gradle
www.liutikas.net/2025/10/28/C...
#gradle
Cache, Cache, No Cache - When to use Gradle Build Cache?
In the light of CVE-2025-36852 I figured it would be a good time to discuss the use of Gradle Build Cache in various set-ups.
www.liutikas.net
October 28, 2025 at 12:23 PM
You might have seen CVE-2025-36852 that affects the use of Gradle remote build cache. I wrote a short post of when to use and when not to use remote cache
www.liutikas.net/2025/10/28/C...
#gradle
www.liutikas.net/2025/10/28/C...
#gradle
Reposted by Aurimas Liutikas
🚨 #dcldn25 kicks off Thursday! Don’t miss The Android Show live from London—Gemini in @AndroidStudio, fresh dev news & live #AskAndroid.
Also catch the Day 2 Keynote with #Android leaders Matthew McCullough, Tor Norbye, Clara Bayarri & Jingyu Shi.
🎟️ Last chance for tickets → london.droidcon.com
Also catch the Day 2 Keynote with #Android leaders Matthew McCullough, Tor Norbye, Clara Bayarri & Jingyu Shi.
🎟️ Last chance for tickets → london.droidcon.com
October 28, 2025 at 10:56 AM
🚨 #dcldn25 kicks off Thursday! Don’t miss The Android Show live from London—Gemini in @AndroidStudio, fresh dev news & live #AskAndroid.
Also catch the Day 2 Keynote with #Android leaders Matthew McCullough, Tor Norbye, Clara Bayarri & Jingyu Shi.
🎟️ Last chance for tickets → london.droidcon.com
Also catch the Day 2 Keynote with #Android leaders Matthew McCullough, Tor Norbye, Clara Bayarri & Jingyu Shi.
🎟️ Last chance for tickets → london.droidcon.com
Reposted by Aurimas Liutikas
The German company that makes the mechanical ladder used in the Louvre heist has used the image to advertise, with the text 'When you need to move fast'
10/10 response, no notes
10/10 response, no notes
October 24, 2025 at 8:27 AM
The German company that makes the mechanical ladder used in the Louvre heist has used the image to advertise, with the text 'When you need to move fast'
10/10 response, no notes
10/10 response, no notes