8 ms·
Compromised version dropped onto phone of a target? Most people are reliant on App Stores for their apps, so that will be a likely vector. We don’t run checksu
by hvklos 8y ago
Compromised version dropped onto phone of a target? Most people are reliant on App Stores for their apps, so that will be a likely vector. We don’t run checksums on desktop software, let alone software from App Stores.
- rocqua 8y agoHow easy is it to target a play-store update? I doubt google allows binaries to be targeted to individuals, so you'd need to push the update to a rather large set, and have the update only activate for the target. That isnt very covert.
- hvklos 8y agoThey’d probably try to compel app stores to support individual targeting as a first step. If the Australian versions haven’t shut down in the next few weeks, it’s a pretty sure bet that they’ll have been compromised.