Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How does App Store and Play Store handle malicious code-push?

Native programming platforms like React Native or Cordova gives the ability to developers to write their applications in JavaScript and publish it for both iOS and Android.

Although code-push is another service that allows the developer to update their application through cloud servers (not official app centers like Play Store or App Store), consider that a developer publish his safe app on the App Store or Play Store and after approval, update his app through code-push and add malicious logic to their app like sending user contacts or gallery images to their servers.

What guarantees for OS security are there in this scenario? And how does Google or Apple handle these apps?

like image 397
Sajjad Iranmanesh Avatar asked Feb 07 '18 02:02

Sajjad Iranmanesh


People also ask

Can an app in App Store have malware?

Malicious apps are available on the App Store and it's important to be on the look out for them. The same is certainly true of Android as that OS is more customizable. Use caution when downloading lesser known apps and if you've been careless in the past, it's worth uninstalling anything that you don't need.

Is App store safe from viruses?

Ultimately yes, if you are purchasing an app from the Apple App Store or Google Play it is more than likely going to be safe for you to download. Both Apple and Google have rigorous security procedures and strict guidelines in place to monitor the security of apps to help keep your devices safe.


1 Answers

I believe there is a slight risk but you cannot use code-push to do native code changes. But still there is a risk and some steps have taken to monitor such cases. https://www.asotop1.com/blog/apple-begins-reject-hot-code-push/

like image 55
Lakshitha Ruwan Avatar answered Oct 20 '22 19:10

Lakshitha Ruwan