Live data from Hacker News

SmartTube Compromised

aftvnews.com

1–10 of 155 posts

Re: SmartTube Compromised

#2
That's exactly why I didn't want to trust this app with a google account, it's mandatory to use it. SmartTube also requires permission to install applications for it's updater feature so it's also possible if the attack was targeted for the malware to install another app to get persistance.

Re: SmartTube Compromised

#3

That's exactly why I didn't want to trust this app with a google account, it's mandatory to use it. SmartTube also requires permission to install applications for it's updater feature so it's also possible if the attack was targeted for the malware to install another app to get persistance.

Although it's very unfortunate this happened, and it shows a lack of security practices, this could happen to any all developer. Compromising other apps you do install.

On my TV the app vanished and after some searching, it was disabled. I was kinda afraid Google had finally (ab)used it's Play Services power to ban it. But luckily it was because the developer marked it as compromised. All and all impact was minimised this way.

I doubt your statement about requiring a Google account to be connected, as you can also import subscriptions instead of granting access to your account.

Re: SmartTube Compromised

#7

That's exactly why I didn't want to trust this app with a google account, it's mandatory to use it. SmartTube also requires permission to install applications for it's updater feature so it's also possible if the attack was targeted for the malware to install another app to get persistance.

> it's mandatory to use it

I've been using it for years and I've never had to sign in.

Re: SmartTube Compromised

#10

In an article about not downloading malware: "You can use my downloader! It's totally safe, bro!" Yeah, I'll pass.

The internal auto updater of the app directly use github as source, was this also compromised ? If malware was only on some random apkmirror upload then it should probably be fine for most users.
Post reply on HN