Comments
700,000 Bad Apps Deleted from Google Play in 2017
Newest First  |  Oldest First  |  Threaded View
GonzSTL
100%
0%
GonzSTL,
User Rank: Ninja
2/2/2018 | 1:02:55 PM
Re: Apples to Androids
Unrelated but analogous was IBM's use of an open architecture when it built the IBM PC. Sure, it opened up the PC marketplace for software, add-in boards, etc., but it also killed their PC business as cheap clones flooded the market. So where it is a good idea to encourage large numbers, those large numbers have a way of biting back at the idea.
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
2/2/2018 | 5:07:17 AM
Re: Apples to Androids
@Brian: So it's a numbers game. You get the growth, but at a huge cost to security -- but with the business expectation that the gains will outweigh the losses (particularly because the market is so small).

Which is all well and good until you consider that, I suspect, this and other instances of allowing poor and easily exploitable security practices may contribute to an ultimate tyranny of small decisions.
BrianN060
50%
50%
BrianN060,
User Rank: Ninja
2/1/2018 | 3:48:49 PM
Re: Apples to Androids
@JoeS: Yes, Apple is much better at vetting than Google, so is Microsoft.  As pointed out on another site about same story yesterday: Google wanted massive numbers of apps, largely as a marketing point.  Best way to do that is an open-door policy.  That got them their market share - at a price. 
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
2/1/2018 | 12:04:36 PM
Apples to Androids
This is a headline you just don't see when it comes to Apple's App Store. As has been pointed out in the Tweetsphere, this means that Google allowed 700,000 crappy, malicious apps into its poorly guarded app store.


Data Privacy Careers Are Helping to Close the IT Gender Gap
Dana Simberkoff, Chief Risk, Privacy, and Information Security Officer, AvePoint, Inc.,  8/20/2018
Ohio Man Sentenced To 15 Months For BEC Scam
Dark Reading Staff 8/20/2018
Intel Reveals New Spectre-Like Vulnerability
Curtis Franklin Jr., Senior Editor at Dark Reading,  8/15/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-15667
PUBLISHED: 2018-08-21
An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. It registers and uses the airmail:// URL scheme. The "send" command in the URL scheme allows an external application to send arbitrary emails from an active account without authentication. The handler has no restriction on who can...
CVE-2018-15668
PUBLISHED: 2018-08-21
An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. The "send" command in the airmail:// URL scheme allows an external application to send arbitrary emails from an active account. URL parameters for the "send" command with the "attachment_" prefix designate atta...
CVE-2018-15669
PUBLISHED: 2018-08-21
An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. Its primary WebView instance implements "webView:decidePolicyForNavigationAction:request:frame:decisionListener:" such that requests from HTMLIFrameElements are blacklisted. However, other sub-classes of HTMLFrameOwnerElements are...
CVE-2018-15670
PUBLISHED: 2018-08-21
An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. Its primary WebView instance implements "webView:decidePolicyForNavigationAction:request:frame:decisionListener:" such that OpenURL is the default URL handler. A navigation request is processed by the default URL handler only if t...
CVE-2018-15671
PUBLISHED: 2018-08-21
An issue was discovered in the HDF HDF5 1.10.2 library. Excessive stack consumption has been detected in the function H5P__get_cb() in H5Pint.c during an attempted parse of a crafted HDF file. This results in denial of service.