News for hackers. Stuff that matters.

A comment on Google's Abandoned Android Authenticator App. Parent comment

Re:Google's Abandoned Android Authenticator App by angry_octet on Friday February 28, 2020 @11:53PM (#22448929)
You go to the bank's website and it has a link to the app on the store?

If they dist an apk, how is the bank to provide updates for their app? Build their own updater architecture? If there was a mitmed update from a store they could cancel it centrally.

Telling people to prefer apks is setting them up to be hacked.

[ Parent | on HN ]
Re:Google's Abandoned Android Authenticator App by beyondzero on Saturday February 29, 2020 @11:34AM (#22451377)
The hybrid approach gives you both benefits. Go to the website of the known institution, and follow their links directly to the downloads in the app store.
[ Parent | on HN ]