app

Google will soon let children use Android phones to make in-person purchases. It says there will be sufficient safeguards and controls for parents. The changes will be to Google Wallet. That's an app that lets users store card details and make ... payments in the real world without the card. The app also lets users store electronic versions of tickets and passes. The payments are contactless and use the NFC (near-field communication) chip in the phone. Users must authenticate the app through a security measure such as a PIN, passcode, fingerprint or facial recognition. Previously the app was only ... (view more)

Running app Strava made it possible to track the locations of world leaders and high-profile political candidates according to a newspaper investigation. Security services say the vulnerability did not put people at risk but are reviewing their ... guidelines on using the app. Le Monde investigated the movements of bodyguards for politicians including Joe Biden, Kamala Harris, Emannuel Macron and Vladimir Putin, Donald Trump plus partners Jill Biden and Melania Trump. (Source: lemonde.fr ) Secret Trip Revealed The newspaper was able to discover the names of the presidential bodyguards and find ... (view more)

The head of controversial messaging app Telegram says it will now comply with some legal requests for information about users. Russian business owner Pavel Durov announced the policy change just weeks after being arrested in France and charged with ... enabling criminal activity. Telegram is a messaging app similar to WhatsApp in that the content of messages is encrypted, to the point that even the operators of the app can't read private messages. It has a couple of significant differences that likely affect the type of people that use it, however. One is that unlike WhatsApp's limit of 1,000 ... (view more)

A useful web feature could be a serious phishing risk according to security researchers. They say scammers are using "progressive web apps" to bypass Android and iOS security features. In simple terms, a progressive web app is a mix of a website and ... a standalone application. It's technically a website and uses web technologies, allowing for instant updates. However, it looks and feels more like a standalone app and can often access more of a device's resources than a web browser. Security firm ESET says scammers are using progressive web apps as a way to overcome a major limitation in scams ... (view more)

Android scammers are using a creatively nasty way to spread malware. They've disguised it as an update for the Google Play store itself. It's a particularly cheeky way to try to get credibility for a malware scam. Not only is Google Play the ... official place to get Android apps in the first place, but the best and simplest Android security tip is to only use apps from Google Play. In this case, the malware doesn't originate as an app but instead as a bogus link. This could be on a web page, in a text message or in an email. The supposed source is Google itself and the link comes with a message ... (view more)

A new form of Android malware can hijack legitimate apps. "Dirty Stream" take advantage of a legitimate function designed to make life easier for users. The function is called ContentProvider and allows one mobile app to access data from, or ... communicate with, another app. It makes it possible to, for example, open a PDF attachment from a messaging app in a dedicated PDF reader app. The people behind the DirtyStream malware found a vulnerability in the way ContentProvider worked. This made it possible not only to force another app to open a compromised file, but to then use the contents to ... (view more)

Google says it blocked 2.28 million potentially malicious apps from getting into the official Play store last year. It stopped or paused a further 200,000 which didn't correctly use the permissions system. The figure for malicious app blocks is up ... almost half compared with 2022. Google didn't say conclusively whether that means more scammers are trying their luck or if it simply did a better job of detecting them. However, it did note the 2023 figure was "in part thanks to our investment in new and improved security features, policy updates, and advanced machine learning and app review ... (view more)

Apple has confirmed some users will be able to download iOS apps from websites rather than an app store. But the relaxation of rules comes with a major limitation. The new policy applies to European Union countries and is part of Apple's response to ... the Digital Markets Act. That's a new rule that says operators of services with a very large number of users in Europe must remove some barriers to competition. These generally include opening services up to third party access. That includes iOS apps were historically Apple has strictly enforced a rule that users can only install apps from its ... (view more)

Major tech companies including Microsoft and Meta say Apple is trying to weasel out of a court ruling on the way it handles app payments. They've weighted in on a court dispute about how to enforce a judgment against Microsoft. The case centers on ... in-app payments where people who've already installed an app give extra money to the app developers. Common examples include subscriptions to a digital service or payments for additional content in games. Apple demands a cut of either 15 or 30 percent of such payments made through its payment handling services. Critics, including games maker Epic, ... (view more)

Apple appears to be exploring loopholes in its recent agreement to allow iPhone users to install apps from sources other than its official store. It wants to continue reviewing apps and taking commission from developers, which could significantly ... undermine the effect of the changes. The company has until March 7 to comply with new rules in Europe. Rather than fight the rules or pull out of the market altogether, it decided to allow sideloading for users in European Union countries . Unlike with some physical device changes made to meet European rules, Apple won't be extending the policy to ... (view more)