Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

When the Apple App Store contained malware compiled by unsuspected Chinese developers using a local cache of Xcode [1], Apple emailed the developers to prompt them to update their application immediately and removed them from sale.

Apple also contacted users directly to alert them of whatever apps they had purchased on the App Store were compromised so they could monitor for updates, or remove the app entirely.

Has Google done the same? Neither Apple or Google have the ability to directly remove apps on a users device, but simply removing it from the store and then having users rely on a solution like MalwareBytes seems like Google is abnegating their responsibility of a safe marketplace.

[1] https://en.wikipedia.org/wiki/XcodeGhost



Apple has this ability, but they have not used it: https://iphone-services.apple.com/clbl/unauthorizedApps


Google can disable apps on the users' devices.

https://developers.google.com/android/play-protect/client-pr...


"Can"

Play protect is a complete joke, it can't even detect malicious chinese apps that request every single permission that exists.


> Neither Apple or Google have the ability to directly remove apps on a users device

I'm pretty sure both can. But it's a legal problem, not a technical one.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: