181–190 of 237 posts
How is the average user expected to use adb and Android Studio to identify & remove malware from their phone? Android security is broken.
Earlier quoted context omitted.
What I believe the author is saying is that he received a push notification to chrome from the malicious app. Coincidentally, I just spent my Saturday evening pouring over malicious JavaScript hosted on Cloudfront that does extensive browser fingerprinting and if a match is made to an Android device a fake Captcha pops up in Chrome which actually enables push notifications and from there a full screen pop-up appears…
he received a push notification to chrome from the malicious app What does that mean? How does an app send a "push notification" to Chrome?
Strange article I unlocked my phone and two accidental clicks led me to agree to a dialog that my brain immediately registered as suspicious What type of dialog can pop up on your Android screen after unlocking and install "malware"? What is "malware" here? It looks like they mean an app from the play store? The next day, I picked up my phone and when I launched Chrome, I immediately noticed it was displaying a spamm…
That would be the case if you enable sideloading, but that isn't mentioned in the article. Is it possible to install an app via popup without going through the store? This needs some clarification.
Earlier quoted context omitted.
> Or anything from FDroid. This is the best heuristic to apply not just for QR code scanning, but for pretty much everything. To avoid malware, avoid the Play Store. When using f-droid, also check out the project web site and git repo (at least in a cursory way, even if you can't fully audit the code, you can get a sense of who the developer is and the project's overall health from the commit log and issue tracker).
I'm largely in the dark when it comes to Android security. What makes F-Droid so much safer?
Can you explain how you managed to install malware while unlocking your bootloader? The only two methods for unlocking I've ever used are OEM applications like Odin for older phones and simple ADB commands for newer ones, neither of which put you at particular danger from malware.
He didn't. It was just an app that was updated and started showing ads. Not malware as it cannot access anything but still annoying.
Earlier quoted context omitted.
> on her iPhone the QR code reader is embedded in her camera app... I wonder why it is not the same in any version of Android that I have used Apple added a builtin QR code scanner to the camera app in iOS 11 due to the ridiculously widespread use of QR codes in China.[1] I guess (Google's version of) Android doesn't have that because Google doesn't derive much value from that market, and QR codes don't have as much…
Android has had a buil-in QR scanner for years. Looking in this thread at least OnePlus, Pixel, Motorola and Samsung has it in the default app. As far as I know it is part of android.
I believe that its built-in app also has a QR scanner in HiVision package, but it requires to accept a scary privacy agreement.
Firefox for Android embeds a QR scanner in its address bar: https://support.mozilla.org/en-US/kb/scan-qr-codes-firefox-a...
A QR code reader was the problem then... I am an Android user since the dawn of time and I was so surprised when my wife showed me that on her iPhone the QR code reader is embedded in her camera app... I wonder why it is not the same in any version of Android that I have used (now I am on Android One). This plus the native support for CardDav and CalDav are pushing me to try iOS next time I have to change my phone.
QR Reader are load of everything. I went mad to find one a decent one for my parents’ android phone and apparently it doesn’t exists. So in a weekend I’ve created one without any kind of tracking, ads, permission, whatever. Here it is if you guys need one -> https://play.google.com/store/apps/details?id=com.prof18.sec...
The one thing I've noticed about the iOS store is that apps are more up-front. Many have a price tag attached to them, which I prefer. Android apps are all about giving you something for free and then in the back doing god knows what to make pennies off of you.
The whole ads-in-apps situation is from some sci-fi novel. Let's make screens bigger, so we can fill more of it with ads.
The lesson here is not "oh look the author is stupid because they installed a shitty QR scanner app and didn't notice the obvious mistake". The lesson should be; even very experienced technical people fall onto the malware trap. We all have day-to-day problems, unexpected stuff happening, in short life doing its thing. We'll inevitably end up being victims of a scam that happens just the worst possible day of them al…
IMO: the lesson here is that restricting people to the OS vendor's software repository doesn't prevent malware. The only way to even help that is via community review (note that apple doesn't review internal behavior of the apps or instrument them in any way, they just have someone try using them behind a proxy) and enforcing public available source code like fdroid.
This was a side-loaded app on an unlocked phone. What am I missing?
Earlier quoted context omitted.
That shows you the most recent app used, but he needed the most recent one installed.
Play Store > My Apps and Games > Installed, and then change the sort order to "Last Updated".
"Google Play Protect was also completely unhelpful, which was a big disappointment. First because Google certainly knows which applications they removed from their store for malware reasons, but even so, I would expect Google Play Protect to at least flag any app it finds on my phone that is not on their store. Such an app is not necessarily malware, but it should certainly be flagged. Google Play Protect could also…
" I would expect Google Play Protect to at least flag any app it finds on my phone that is not on their store. Such an app is not necessarily malware, but it should certainly be flagged." seems like Google is between a rock and a hard place here, they already catch so much heat over their treatment of third party app stores there would certainly be a lot of outrage over this if they started doing it