AppliedMicro
macrumors 68040
Admittedly, I can't quickly find prior reference that includes both of us. We may not have crossed paths on this particular point (though we did, more generally, on the discussion of sideloading). 🙂I am not aware of any replies of that sort (...) Linking me to any prior responses you have made would be much appreciate, because I am seriously drawing a blank here.
No other app can - it would have to know the login details. But that's the thing: You can distribute fake banking apps over such a channel. The attack vector is open. Though it is, admittedly, somewhat "unusual" to install third-party apps this way - though I'd also argue it is on Android.Well, Facebook wasn't taking control of one's iPhone remotely, logging in to their banking app and siphoning their life savings in the least. I guess we can be thankful for that.
Of course - enterprise certificates and apps still exist today.It also seemed to have happened many years ago (you honestly can't expect me to remember an article from 2019), so I wonder if something like is still possible today?
What they can do, and what access they have, may of course change by tightening the system. Example:
https://arstechnica.com/gadgets/202...ps-still-snoop-your-sensitive-clipboard-data/
https://www.macrumors.com/2022/10/17/ios-16-1-paste-from-other-apps-settings/
👉 Sandboxing apps and limiting their access to data are real security.
Last edited: