3 ms·
From a user's standpoint, the impression I'm getting is this: "A user might download a malicious update to an existing application from someplace other than Go
by orblivion 9y ago
From a user's standpoint, the impression I'm getting is this:
"A user might download a malicious update to an existing application from someplace other than Google Play, and Android will incorrectly tell the user that the application is valid."
Is this correct? Then they should say so in this article, perhaps in the introduction. As a user I can look at the details later if I'm interested, but for now I need to know what (not) to do to stay safe.
Again, beating the drum that security news needs to improve its messaging.
- tonyztan 9y agoI believe your understanding is correct. And if you have security patch level of 2017-12-01 or newer, you are safe from this vulnerability. I agree that the article needs a TLDR at the top. https://source.android.com/security/bulletin/2017-12-01 https://source.android.com/security/bulletin/2017-12-01
- s73ver_ 9y ago"And if you have security patch level of 2017-12-01 or newer, you are safe from this vulnerability." So, not most people.