4 ms·
If I understand correctly, the exploit needs no special privileges to run the exploit code. Google Play doesn't vet apps before they go up, they take down apps
by mattbee 10y ago
If I understand correctly, the exploit needs no special privileges to run the exploit code. Google Play doesn't vet apps before they go up, they take down apps in response to complaints. So no it's not safe, but I'd (maybe naively) expect them to notice a dangerous app pretty quickly.
- warkdarrior 10y agoGoogle Play does vet apps before they go up. They have several mechanisms to analyze apps before they are published in the app store. Look up Google Bouncer. This said, it is not clear that their analysis would catch apps that try to exploit these vulnerabilities.
- gregmac 10y ago> This said, it is not clear that their analysis would catch apps that try to exploit these vulnerabilities. I would hazard a guess that right now there a bunch of people at Google making sure that it does.
- digi_owl 10y agoI could have sworn that all apps are run inside a test environment before allowed onto the store. But the process is automated and likely will not catch novel attacks.
- ocdtrekkie 10y agoThis is correct, they do now test apps before they go up. But yeah, plenty of malware is regularly found in the Play Store, so you can't just "trust Google" to protect you.