Man-in-the-Disk: Android Apps Exposed via External Storage