[HN Gopher] Ads are now able to bypass Google Play to install ap...
       ___________________________________________________________________
        
       Ads are now able to bypass Google Play to install apps WITHOUT user
       consent
        
       Author : aj3
       Score  : 28 points
       Date   : 2021-10-09 19:11 UTC (3 hours ago)
        
 (HTM) web link (www.reddit.com)
 (TXT) w3m dump (www.reddit.com)
        
       | 0des wrote:
       | I am curious if never logging in to Google while using an Android
       | precludes one from being susceptible to this. Generally you are
       | unable to reach or interact with the app store without first
       | registering a Google account on the device, and accepting various
       | EULAs.
       | 
       | EDIT: Thanks to the commenters below, it appears not
       | participating in the app store ecosystem does not safeguard
       | someone from this. Quite concerning.
        
         | aj3 wrote:
         | Reddit comment explains that the software that handles app
         | sideloading gets preinstalled by carriers:
         | https://www.reddit.com/r/androiddev/comments/q4nltn/comment/...
        
         | FastEatSlow wrote:
         | Doesn't look like it, this is using the "On-Device Platform" by
         | Digital Turbine, which is used to preload bloatware onto
         | phones. It's pre-installed on many phones for ad money.
         | 
         | Based off the "SingleTap" demo video, it even works in a
         | browser on an ad, which is a bit scary.
         | 
         | According to the partners list, phone/provider brands affected
         | are: Verizon, At&T, Samsung, LG, Xiaomi, Motorola, Panasonic,
         | Acer, T Mobile, Cricket, US Cellular, America movil, Tracfone,
         | Telfonica and Tim Gruppo Tim.
        
       | kevinventullo wrote:
       | The fact that Apple doesn't allow (non-Apple) pre-loaded
       | bloatware on iPhones is probably the number one reason I'll never
       | switch back to Android.
        
         | [deleted]
        
       ___________________________________________________________________
       (page generated 2021-10-09 23:02 UTC)