3 ms·

I thought Google removed the API that let you see other apps on the device. Maybe there's another API I'm not aware of though

grahamedgecombe 10mo ago
You can still request permission to use it for apps distributed via Google Play for a limited set of use cases: https://support.google.com/googleplay/android-developer/answer/10158779?hl=en-GB https://support.google.com/googleplay/android-developer/answ... which is then subject to Google reviewing and approving it. I assume HSBC are using the "antivirus" use case.
- hn8726 10mo ago
  > I assume HSBC are using the "antivirus" use case. There's an exception for banking apps > Apps that have a verifiable core purpose facilitating financial-transactions involving financially regulated instruments (for example, dedicated banking, dedicated digital wallets) may obtain broad visibility into installed apps solely for security-based purposes.
- phantom784 10mo ago
  Interesting, that also permits: > Real-money gambling apps where the core purpose of the app is real money gambling and where the app requires broad package visibility in order to comply with technical standards mandated by applicable geofencing regulations. I presume that's to allow the gambling apps to make sure you don't have a location spoofing app installed?
  - andrepd 10mo ago
    13 year olds can get groomed and addicted to gambling, be they at home, school, or a bus stop. But God forbid you install an app outside the approved™ app store®, citizen. What a world.
hn8726 10mo ago
It's still possible, you just need to declare which other apps you query for. Even then, there are loopholes that still let you query for all apps installed on the device. But HSBC app declares "<uses-permission android:name="android.permission.QUERY_ALL_PACKAGES"/>" permission, which requires an explicit approval (https://support.google.com/googleplay/android-developer/answer/10158779 https://support.google.com/googleplay/android-developer/answ...) but > Apps that have a verifiable core purpose facilitating financial-transactions involving financially regulated instruments (for example, dedicated banking, dedicated digital wallets) may obtain broad visibility into installed apps solely for security-based purposes.
navigate8310 10mo ago
Everyone knows all the apps on your phone https://peabee.substack.com/p/everyone-knows-what-apps-you-use https://peabee.substack.com/p/everyone-knows-what-apps-you-u... Discussion: https://news.ycombinator.com/item?id=43518866 https://news.ycombinator.com/item?id=43518866

grahamedgecombe 10mo ago

You can still request permission to use it for apps distributed via Google Play for a limited set of use cases: https://support.google.com/googleplay/android-developer/answer/10158779?hl=en-GB https://support.google.com/googleplay/android-developer/answ... which is then subject to Google reviewing and approving it. I assume HSBC are using the "antivirus" use case.

hn8726 10mo ago
> I assume HSBC are using the "antivirus" use case. There's an exception for banking apps > Apps that have a verifiable core purpose facilitating financial-transactions involving financially regulated instruments (for example, dedicated banking, dedicated digital wallets) may obtain broad visibility into installed apps solely for security-based purposes.
phantom784 10mo ago
Interesting, that also permits: > Real-money gambling apps where the core purpose of the app is real money gambling and where the app requires broad package visibility in order to comply with technical standards mandated by applicable geofencing regulations. I presume that's to allow the gambling apps to make sure you don't have a location spoofing app installed?
- andrepd 10mo ago
  13 year olds can get groomed and addicted to gambling, be they at home, school, or a bus stop. But God forbid you install an app outside the approved™ app store®, citizen. What a world.

hn8726 10mo ago

It's still possible, you just need to declare which other apps you query for. Even then, there are loopholes that still let you query for all apps installed on the device. But HSBC app declares "<uses-permission android:name="android.permission.QUERY_ALL_PACKAGES"/>" permission, which requires an explicit approval (https://support.google.com/googleplay/android-developer/answer/10158779 https://support.google.com/googleplay/android-developer/answ...) but > Apps that have a verifiable core purpose facilitating financial-transactions involving financially regulated instruments (for example, dedicated banking, dedicated digital wallets) may obtain broad visibility into installed apps solely for security-based purposes.

navigate8310 10mo ago

Everyone knows all the apps on your phone https://peabee.substack.com/p/everyone-knows-what-apps-you-use https://peabee.substack.com/p/everyone-knows-what-apps-you-u... Discussion: https://news.ycombinator.com/item?id=43518866 https://news.ycombinator.com/item?id=43518866