Using hover to compromise the confidentiality of user input on Android
Android permissions demystified