News for hackers. Stuff that matters.
Re:Google to require developer verification to install and s... by fn-mote on Monday August 25, 2025 @07:26PM (#45020460)
> cracked versions of spotify/youtube/paid games

This doesn't make much sense to me.

To put the strongest face on it, by "cracked" youtube, you mean a version that shows the cracker's ads and maybe somehow generates extra clicks (or whatever) so they can get money out of it?

Cracked spotify? In my mind that's just like YouTube, almost entirely server-side. I guess you're talking about hijacking ads here, too? I feel like a "real" crack of Spotify would let you listen to music for free, but that should be impossible (unless their SWE's are incompetent).

Re:Google to require developer verification to install and s... by 867-5309 on Monday August 25, 2025 @07:50PM (#45020604)
no, cracked as in the ad-free premium versions, without paying for them
Re:Google to require developer verification to install and s... by miki123211 on Monday August 25, 2025 @08:33PM (#45020880)
Those "cracked" versions often require extra permissions.

My favorite was a local "discover which on your contacts is on the leaked Covid quarantine list[1]" scam app. It claimed that the extra permission dialogs are just fearmongering by Google, who is in cahoots with big pharma, and wants covid to spread to sell more medications.

[1] In fact, no such leak has ever taken place, its existence was just part of the setup for the scam.

Re:Google to require developer verification to install and s... by thephyber on Monday August 25, 2025 @08:52PM (#45020998)
You are approaching as is the malicious developer was trying to add useful features for the users.

But in practice, these “apps that lookalike popular apps” are not intended to just be adware-less versions of the popular apps. They are frequently “hide the ads, inject the malware with more permissions” Trojan horses.

Re:Google to require developer verification to install and s... by Gigachad on Tuesday August 26, 2025 @12:12AM (#45022191)
I think there is likely a dual motive from Google where they both want to stop malware _and_ stop people blocking youtube ads. The malware problem is real though.
Re:Google to require developer verification to install and s... by const_cast on Tuesday August 26, 2025 @01:36PM (#45029753)
Yes but using a real problem as a vehicle for increased control and permission is, in it of itself, a Trojan horse.

Google is doing the same thing the fake apps are doing. Real problem: bad ads. Solution: cracked app. Trojan: too many permissions, steals data.

Google: problem: bad apps. Solution: advanced Google DRM. Trojan: too many permissions, steals data.

Re:Google to require developer verification to install and s... by johnmaguire on Monday August 25, 2025 @09:51PM (#45021374)
They mean apps like SmartTube, Vanced, Instander, Spotify Premium Mod which block ads or grant other premium features for free.