Not affecting Play Store apps so it's really irrelevant.
If you try to download an app without paying or knowing the source of it you probably deserve a virus. ;)
It's like if you get some knock off drug off the internet and gives you more trouble than gain... would you blame the pharma company?
Not entirely irrelevant. From what I've read, downloading directly from the Play Store has been taken care of. That probably also means the Play Store / Play Services verifier for sideloaded apps is checking for this exploit.
That being said people who use other app stores and don't have Play Services (e.g. Kindle Fires, Chinese devices, etc.) probably have some legitimate room for concern (at least until those stores are in the loop and are taking countermeasures). Of course that's nowhere near 99% of Android devices, but why let the facts get in the way of a good headline?
Well, yeah, in the end it all comes down to who you're willing to trust. So it's everyone's personal choice.
Personally, the only "web company" I'm willing to trust, is Mozilla. And that's probably the result of the fact that they're not-for-profit. And that fact eliminates a great deal of potential for corruption.
This could be a problem for all the custom rom guys installing Gapps/play store apk's. Many Chinese manufacturers dont get access to official google apk either
16 comments
[ 3.4 ms ] story [ 61.5 ms ] threadThat being said people who use other app stores and don't have Play Services (e.g. Kindle Fires, Chinese devices, etc.) probably have some legitimate room for concern (at least until those stores are in the loop and are taking countermeasures). Of course that's nowhere near 99% of Android devices, but why let the facts get in the way of a good headline?
edit: Yeah. There's no way this affects 99% devices, because 99% people won't bother downloading apps from non-Play sources.
Read my comment I left there couple days ago. https://news.ycombinator.com/item?id=5976087
(It doesn't sound too far fetched to me, since we know that the NSA has even installed hardware at companies like Google.)
EDIT: to the downvoters: if you downvote, say what you don't find ok. Is it the critical thinking part?
you do? I never heard of such thing - can you tell more?
Here you go: http://gigaom.com/2013/06/29/new-prism-slides-say-the-progra...
http://www.techdirt.com/articles/20130701/00444723675/newly-...
Personally, the only "web company" I'm willing to trust, is Mozilla. And that's probably the result of the fact that they're not-for-profit. And that fact eliminates a great deal of potential for corruption.