Google is making it harder for Android apps to spy on each other

1. Abode
2. News
3. Privacy

Google is making information technology harder for Android apps to spy on each other

(Image credit: Lukmanazis/Shutterstock)

Google is making a modify to Android that volition prevent apps from snooping on ane another.

Taking effect May v and applying primarily to Android xi, the rule update bans about apps from using the new QUERY_ALL_PACKAGES permission, which reveals details well-nigh the other apps installed on a device.

• The best Android antivirus apps to keep your device clean
• This Android update is actually nasty spyware — what you lot need to know
• Plus: Hackers turn to phone calls to infect PCs with malware

It's meant to stop apps from getting sensitive information or creating device profiles that can be used for advertisement or even spying purposes.

The exceptions will be apps that need to see what'southward going on every bit part of their core functions, including antivirus apps, browsers, file managers and search apps. Digital-wallet and banking apps may be able to ask for temporary exceptions.

These apps will have to declare that they are using this permission in their Google Play listings.

Google explained in a new notice to app developers that it "regards the device inventory of installed apps queried from a user's device as personal and sensitive information."

Apps that request to apply the QUERY_ALL_PACKAGES permission "must exist able to sufficiently justify why a less intrusive method of app visibility will not sufficiently enable your app's policy-compliant user-facing core functionality."

Abusing a privilege

The QUERY_ALL_PACKAGES permission, introduced with Android xi, replaces and supersedes an older fix of functions that apps have used to see details about the other apps installed on an Android device, Catalin Cimpanu at The Record explained.

These functions were originally created to resolve compatibility issues, only they ended up being abused. Because they were functions and not permissions, the apps did not need to ask or even inform the user earlier doing and then.

A year-old enquiry newspaper found that roughly 30% of commercial Android apps — including nearly 73% of games — used these functions to get data almost the other apps installed on a device.

Less than three% of open-source Android apps did and so. Many of the app queries were generated by third-political party advertizing and utility code used by app developers, oft without the knowledge of the developers themselves.

Although this modify in theory affects merely Android 11, estimated to be on merely about 6% of Android devices in agile apply correct now, XDA-Developers explained that information technology will become more or less mandatory in Nov when Google will require that all app evolution "target" Android eleven or afterward rather than earlier versions.

Paul Wagenseil is a senior editor at Tom's Guide focused on security and privacy. He has also been a dishwasher, fry cook, long-haul driver, code monkey and video editor. He'southward been rooting around in the information-security space for more than than xv years at FoxNews.com, SecurityNewsDaily, TechNewsDaily and Tom's Guide, has presented talks at the ShmooCon, DerbyCon and BSides Las Vegas hacker conferences, shown up in random TV news spots and even chastened a panel discussion at the CEDIA home-technology briefing. You can follow his rants on Twitter at @snd_wagenseil.

Source: https://www.tomsguide.com/news/android-app-mutual-visibility

Posted by: rodriguezwhistooday.blogspot.com

Share this post