Re:Think Windows is insecure? You're wrong, says security fi...
by udp on Saturday August 13, 2011 @07:18PM
(#2882261)
How would they be screened? If you include native libraries in your APK, they're binaries, not code. They could scan the binary for API calls, but you're permitted to call dlopen() etc, so you could always hide a shared object in there and call it dynamically.
The Android thing works because you aren't just running arbitrary code, you are probably running code that you got from the Android Marketplace, which was probably screened to make sure it doesn't do something bad.