3 ms·
This is frankly a ridiculous statement. If you are an experienced software developer, and correctly apply supply chain security policies, you can likely build a
by angry_octet 7y ago
This is frankly a ridiculous statement. If you are an experienced software developer, and correctly apply supply chain security policies, you can likely build and install an apk correctly.
Literally billions of regular users cannot do that, and regularly install malware laden apks.
- ocdtrekkie 7y agoConsider that if I know how to get to my bank's website, and it gives me an APK to install, I know it came from my bank, unless my bank's server is compromised in some way. I have no way to easily determine that an app on the Play Store actually came from my bank. At best, I can look at the install count, hope the app store does a half way decent job looking for fraud, and hope for the best. Maybe if I'm lucky they have some sort of verification program? The idea we actually trust app stores from Google or Apple over a direct install from the institutions we want to interact with is hilarious, especially considering all of the rampant malware and fraud issues on the Play Store.
- angry_octet 7y agoYou go to the bank's website and it has a link to the app on the store? If they dist an apk, how is the bank to provide updates for their app? Build their own updater architecture? If there was a mitmed update from a store they could cancel it centrally. Telling people to prefer apks is setting them up to be hacked.
- beyondzero 7y agoThe hybrid approach gives you both benefits. Go to the website of the known institution, and follow their links directly to the downloads in the app store.