2 ms·
We don't know why these apps got through in particular. However, I do think we have a unique vantage point by being outside any particular app store. We scan c
by NateLawson 11y ago
We don't know why these apps got through in particular. However, I do think we have a unique vantage point by being outside any particular app store.
We scan code on both iOS and Android, identifying libraries and patterns of behavior. OpenSSL, for example, is the same code, regardless of platform, but the versions of it may vary depending on packaging and porting. We found one guy who had compiled OpenSSL for Android and was distributing binaries from github. Not the safest way to get your software.
As a third-party, you can move quickly and correlate info across app stores. But I also think we've developed a pretty unique code analysis engine that neither Apple nor Google has. :-)