4 ms·
Regarding storing files: They either are using https://developer.android.com/training/data-storage/app-specific https://developer.android.com/training/data-stor
by robryk 5y ago
Regarding storing files: They either are using https://developer.android.com/training/data-storage/app-specific https://developer.android.com/training/data-storage/app-spec... and other apps would not be able to access those files at all, or they should be using it instead of just using "external storage".
- ivanmontillam 5y agoI agree, I see it currently uses the "unprivileged storage" (the user-space storage called "Internal Storage"). "My Files" ("com.sec.android.app.myfiles" on Samsung Android) is an app and certainly has access to those files. If that app has access to that directory, certainly many other apps do have access, such as Samsung Gallery ("com.sec.android.gallery3d" on Samsung Android). Of course, in the case of the Gallery app it's just used as an image viewer, but that is not an inhibition for another app to exfiltrate these directories into a server. What if some malicious app synced WhatsApp directories into a 3rd party server? I don't see it too hard.