Android Marshmallow introduced a feature users sorely needed: dynamic permissions. We take this a few steps further by hooking Android's Binder IPC system to give users fine-grained control over messages passed between applications. Because every message in Android passes through Binder, we have all the keys to all the locks. I'll cover how we hooked Binder to modify camera and microphone data, restrict permissions based on environmental context, steal kernel messages and reinsert them (like Netfilter), and allow regex-like parsing of all messages in Android.