> If the SDK was backdoored it would show up on everyone's downloads, which greatly increases the chances of detection. I think you have far too much confidenc

> If the SDK was backdoored it would show up on everyone's downloads, which greatly increases the chances of detection. I think you have far too much confidence in this. How exactly would the average Android developer check to see if the SDK they downloaded from Android Studio doesn't have a targeted exploit in it? Or Android Studio itself for that matter?