4 ms·
To clarify, so Google can distribute a binary that has been tampered with, but it'd be trivial to prove that they had in fact done that?
by petertodd 12y ago
To clarify, so Google can distribute a binary that has been tampered with, but it'd be trivial to prove that they had in fact done that?
- jlund 12y agoThat's correct. Android will warn you if the signatures don't match too. Even if we're in the full-on conspiracy theory territory of Google disabling that core security feature, impersonating a third-party developer, and dropping a binary onto a single user's phone, they still couldn't fake the signature.
- jacquesm 12y agoThey could simply disable the warning. It's android giving the warning, not the app.