Proves that an app requesting SMS_RECEIVE and READ_PHONE_STATE can accomplish account hijacking. - View it on GitHub