4 ms·
What if an app is sold and I don't trust the new developer?
by Zhenya 7y ago
What if an app is sold and I don't trust the new developer?
- anticensor 7y agoDoes auto-update persist when authhor changes?
- marcusjt 7y agoYes, alas, same for iOS AFAIK. It's a flaw in the security/trust model of both platforms. Similarly, you'll be prompted for new permissions if a malicious new owner adds new permissions to the app, but nothing tells you it's a new owner so you will likely grant permissions without realising everything might have changed.
- vetinari 7y agoIt's not really a flaw. Whether it is the same app or not is being distinguished by package name + signing key. If both versions are signed by the same key, for all intents and purposes the newer version is legit. On Android, in offline scenario, the installer doesn't even know who is the author and whether it changed. Here, all it knows is the above: package name + key used to sign.
- alleyshack 7y agoThis is my biggest concern. One of my favorite mobile games (high stakes, I know) was originally produced by a small indie dev with a strong privacy policy. A year or so ago they sold to Zynga. I've not updated the app since then because I don't want any Zynga apps on my phone. If this forces me to update to the privacy-invasive, user-hostile Zynga version, I'll have to uninstall one of my favorite games. :(
- JohnFen 7y agoParticularly, since app developers tend to be pretty abusive in terms of data collection, my default position is that any app dev cannot be trusted until they've proven otherwise.