News for hackers. Stuff that matters.

A comment on Google will allow users to sideload Android apps without verification. Parent comment

Re:Google will allow users to sideload Android apps without ... by raxxorraxor on Thursday November 13, 2025 @08:18AM (#45914562)
Some apps would use this for loopback addresses, which as far as I know will then need network permission. The problem here is the permission system itself because ironically Google Play is full of malicious software.

And neither Android nor iOS a safer than modern Desktop systems. On the contrary because leaking data is its own security issue.

[ Parent | on HN ]
Re:Google will allow users to sideload Android apps without ... by LtWorf on Thursday November 13, 2025 @08:26AM (#45914641)
Wasn't the loopback address recently used maliciously?
[ Parent | on HN ]
Re:Google will allow users to sideload Android apps without ... by salawat on Thursday November 13, 2025 @08:48AM (#45914863)
Yes. Facebook/Meta was using a locally hosted proxy to get info smuggled back without using routes that are increasingly obstructed by things like ad blockers if I recall correctly.

https://securityonline.info/androids-secret-tracking-meta-ya...

Search string for DDG: Meta proxy localhost data exfiltration

[ Parent | on HN ]