News for hackers. Stuff that matters.

A comment on Android Income Report. Parent comment

Re:Android Income Report by jonoberheide on Monday May 14, 2012 @11:27AM (#3971446)
FYI, it is possible for unprivileged apps to invoke the INSTALL_ASSET functionality themselves. One such example described here:

http://blog.duosecurity.com/2011/05/when-angry-birds-attack-...

Another variation of that attack is still unpatched, allowing any app to invoke INSTALL_ASSET. Certainly that's not intended functionality and is a bug that will be (eventually) patched, but I wouldn't classify it as FUD.

[ Parent | on HN ]
Re:Android Income Report by gurkendoktor on Tuesday May 15, 2012 @01:13PM (#3977537)
That is indeed a little scary. Thanks!
[ Parent | on HN ]