News for hackers. Stuff that matters.

A comment on Show HN: I built a website to share files and messages without any server. Parent comment

Re:Show HN: I built a website to share files and messages wi... by realusername on Monday May 06, 2024 @05:28AM (#40272780)
No it's anytime you use your device. The stores can push silent updates and change your apps or access anything at any point.

The only exception I'm aware of is GrapheneOS where that's not possible. Otherwise if you are using iOS or any other Android rom than GrapheneOS, you are vulnerable to that.

[ Parent | on HN ]
Re:Show HN: I built a website to share files and messages wi... by eviks on Monday May 06, 2024 @08:45AM (#40273984)
Do you have a source for the silent remote app install for iOS by Apple, only heard of a remote disabling (but not removal) of an app there?

Though even in that case the dev can't do that, so your trust is :

web: dev every time you load an app

native: dev once you install an app, OS vendor any time

[ Parent | on HN ]