> the malware captures their two-factor authentication codes
Aren't we supposed to have sandboxing to prevent this kind of thing? If the malware relies on exploiting n-days on unpatched OSes, they could bypass the sideloading restrictions too.
Aren't we supposed to have sandboxing to prevent this kind of thing? If the malware relies on exploiting n-days on unpatched OSes, they could bypass the sideloading restrictions too.
On the Play store there is a bunch of annoying checking for apps that request READ_SMS to prevent this very thing. Off Play such defense is impossible.
(I'm being facetious here but this is massively preferable to disabling sideloading altogether)
If you care about the topic, which you seemingly do, stop using this doubleplusgood term.
I am pretty confident that if Google had enabled this policy only for apps which use these permissions that the community would still be upset.
I am pretty confident that if Google had enabled this policy only for apps which use these permissions that the community would still be upset.