arstechnica.com/…/android-app-from-china-executed…
By exploiting unknown vulnerabilities in the operating system.
Comment on Shopping app Temu is “dangerous malware,” spying on your texts, lawsuit claims
FunnyUsername@lemmy.world 6 months ago
Can someone explain to me how you can just simply program something to bypass privacy and security features? What is the point of having these features if you can literally just program something to ignore them? Like…??? Temu is obviously bad if this is true, but if it IS true, it shouldn’t have been possible to begin with!!
nutt_goblin@lemmy.world 6 months ago
Churbleyimyam@lemm.ee 6 months ago
Looking forward to someone answering this
KillingTimeItself@lemmy.dbzer0.com 6 months ago
one of the most obvious ways is to simply not bypass them, and then do it from within the application itself. That way you can essentially man in the middle the rest of it, though this would require a rather specific set of events and a particularly nested design of an app.
Juantonz@lemmy.world 6 months ago
Im not sure how they specifically bypass the features in other ways but I imagine some of it is from users accepting permissions under the guise of another use. For example, maybe you accept the microphone permission on tik tok to record video. With that permission in theory the app could now use it maliciously. Of course it should all depend on the users choice for that and im not sure beyond the scope of that.