3 ms·

It's kinda a chain of trust. One of the value of the Play Store is that you trust it not to include malware (if you do). If they allowed other app stores to be

by uxp100 8y ago

It's kinda a chain of trust. One of the value of the Play Store is that you trust it not to include malware (if you do). If they allowed other app stores to be installed through it, google can't be confident in saying if you use our store, you won't get malware.

scarface74 8y ago
You trust the Google Play Store not to have malware?
- lern_too_spel 8y ago
  It's certainly far more trustworthy than the iOS app store and Chinese app stores, all by a wide margin.
  - scarface74 8y ago
    Based on what metric? Google doesn’t even pretend to review apps and the Google app permissions framework is laughable.
    - lern_too_spel 8y ago
      Based on total malware installs, where Apple has everybody beat by even just Xcodeghost alone. Google doesn't pretend that manually reviewing apps prevents malware because it obviously (to any software engineer) doesn't. It does, however do both static and dynamic analysis of the apps in its store, unlike Apple and the Chinese app stores.
      - scarface74 8y ago
        And that really hasn’t help. Xcodeghost basically affected the Chinese App Store where app authors downloaded a non Apple hosted version of Xcode. https://us.norton.com/internetsecurity-mobile-android-vs-ios-which-is-more-secure.html https://us.norton.com/internetsecurity-mobile-android-vs-ios... https://www.sophos.com/en-us/security-news-trends/security-trends/malware-goes-mobile.aspx https://www.sophos.com/en-us/security-news-trends/security-t... That doesn’t even consider all of the unpatched Android security holes. https://www.esecurityplanet.com/mobile-security/how-secure-is-android-if-google-wont-patch.html https://www.esecurityplanet.com/mobile-security/how-secure-i... Or the fact that most Android phones are running older versions that will never get patched. https://developer.android.com/about/dashboards/ https://developer.android.com/about/dashboards/ Compared to iPhones running the latest versions.... https://www.digitaltrends.com/mobile/ios-distribution-news/ https://www.digitaltrends.com/mobile/ios-distribution-news/
        lern_too_spel 8y ago
        There is no "Chinese app store" for iDevices. Anybody who downloaded WeChat anywhere in the world was affected. Trying to bring uo unpatched devices is changing the subject (security-conscious people use Android devices that get regular security updates) — we were talking about app stores. It remains a fact that far more people have been infected with malware from the Apple App Store than from all other app stores combined.
        scarface74 8y ago
        People who care about security use devices that get updates - that’s true. They buy iOS devices. Which Android devices get regular updates for over 2 years? 3 years? 5 years? Android is insecure by design - since most devices can’t be updated. Unlike iOS devices that get updated regularly worldwide without waiting on the carrier. And I posted links showing that Android is not as secure. Do you have any links to back up your claims?
        lern_too_spel 8y ago
        The subject was whether the Play Store was secure. I showed that it is far more secure than the Apple App Store, and you conceded that argument. Now you want to change to another argument. I am happy to oblige. > Which Android devices get regular updates for over 2 years? 3 years? Pixel, Android One, Nokia, and Blackberry devices. People who have enough money to buy an iOS device have enough money to buy an Android One device every year to get an even more secure device. > Android is insecure by design - since most devices can’t be updated. There are far more Android device models that can be updated than iOS device models. Those who care about security choose those devices. > Do you have any links to back up your claims? http://lmgtfy.com/?q=xcodeghost http://lmgtfy.com/?q=xcodeghost Meanwhile, your links were for unpatched Android devices that security-conscious users don't use. You might as well post links about unpatched vulnerabilities for the Apple Newton.

by uxp100 8y ago

scarface74 8y ago

You trust the Google Play Store not to have malware?

lern_too_spel 8y ago
It's certainly far more trustworthy than the iOS app store and Chinese app stores, all by a wide margin.
- scarface74 8y ago
  Based on what metric? Google doesn’t even pretend to review apps and the Google app permissions framework is laughable.
  - lern_too_spel 8y ago
    Based on total malware installs, where Apple has everybody beat by even just Xcodeghost alone. Google doesn't pretend that manually reviewing apps prevents malware because it obviously (to any software engineer) doesn't. It does, however do both static and dynamic analysis of the apps in its store, unlike Apple and the Chinese app stores.
    - scarface74 8y ago
      And that really hasn’t help. Xcodeghost basically affected the Chinese App Store where app authors downloaded a non Apple hosted version of Xcode. https://us.norton.com/internetsecurity-mobile-android-vs-ios-which-is-more-secure.html https://us.norton.com/internetsecurity-mobile-android-vs-ios... https://www.sophos.com/en-us/security-news-trends/security-trends/malware-goes-mobile.aspx https://www.sophos.com/en-us/security-news-trends/security-t... That doesn’t even consider all of the unpatched Android security holes. https://www.esecurityplanet.com/mobile-security/how-secure-is-android-if-google-wont-patch.html https://www.esecurityplanet.com/mobile-security/how-secure-i... Or the fact that most Android phones are running older versions that will never get patched. https://developer.android.com/about/dashboards/ https://developer.android.com/about/dashboards/ Compared to iPhones running the latest versions.... https://www.digitaltrends.com/mobile/ios-distribution-news/ https://www.digitaltrends.com/mobile/ios-distribution-news/
      - lern_too_spel 8y ago
        There is no "Chinese app store" for iDevices. Anybody who downloaded WeChat anywhere in the world was affected. Trying to bring uo unpatched devices is changing the subject (security-conscious people use Android devices that get regular security updates) — we were talking about app stores. It remains a fact that far more people have been infected with malware from the Apple App Store than from all other app stores combined.
        scarface74 8y ago
        People who care about security use devices that get updates - that’s true. They buy iOS devices. Which Android devices get regular updates for over 2 years? 3 years? 5 years? Android is insecure by design - since most devices can’t be updated. Unlike iOS devices that get updated regularly worldwide without waiting on the carrier. And I posted links showing that Android is not as secure. Do you have any links to back up your claims?
        lern_too_spel 8y ago
        The subject was whether the Play Store was secure. I showed that it is far more secure than the Apple App Store, and you conceded that argument. Now you want to change to another argument. I am happy to oblige. > Which Android devices get regular updates for over 2 years? 3 years? Pixel, Android One, Nokia, and Blackberry devices. People who have enough money to buy an iOS device have enough money to buy an Android One device every year to get an even more secure device. > Android is insecure by design - since most devices can’t be updated. There are far more Android device models that can be updated than iOS device models. Those who care about security choose those devices. > Do you have any links to back up your claims? http://lmgtfy.com/?q=xcodeghost http://lmgtfy.com/?q=xcodeghost Meanwhile, your links were for unpatched Android devices that security-conscious users don't use. You might as well post links about unpatched vulnerabilities for the Apple Newton.