Re:Google Play is reinstating the app permissions section
by yjftsjthsd-h on Thursday July 21, 2022 @02:16PM
(#32182785)
That's good to hear, but how do they tell? I mean, following a GPS API call through to something that talks over the network seems like the kind of thing that would be a decent amount of work even with the source code; am I underestimating the state of modern analysis on binaries?
[ Parent
| on HN ]
Re:Google Play is reinstating the app permissions section
by awinter-py on Thursday July 21, 2022 @09:22PM
(#32187365)
ah I bet this is google detecting an SDK, not doing deeper code analysis to detect exfiltration of GPS data
they did this with the huq sdk https://www.vice.com/en/article/y3vp35/google-tells-apps-dis...
Re:Google Play is reinstating the app permissions section
by awinter-py on Thursday July 21, 2022 @03:24PM
(#32183706)
agree, but also this is where tech needs to get if we want to have private experiences + actual control over downloaded binaries
(could also do dataflow analysis on code in a trusted third party CI system)