Admittedly, I can't quickly find prior reference that includes both of us. We may not have crossed paths on this particular point (though we did, more generally, on the discussion of sideloading).I am not aware of any replies of that sort (...) Linking me to any prior responses you have made would be much appreciate, because I am seriously drawing a blank here.
No other app can - it would have to know the login details. But that's the thing: You can distribute fake banking apps over such a channel. The attack vector is open. Though it is, admittedly, somewhat "unusual" to install third-party apps this way - though I'd also argue it is on Android.Well, Facebook wasn't taking control of one's iPhone remotely, logging in to their banking app and siphoning their life savings in the least. I guess we can be thankful for that.
Of course - enterprise certificates and apps still exist today.It also seemed to have happened many years ago (you honestly can't expect me to remember an article from 2019), so I wonder if something like is still possible today?
What they can do, and what access they have, may of course change by tightening the system. Example:
https://arstechnica.com/gadgets/202...ps-still-snoop-your-sensitive-clipboard-data/
https://www.macrumors.com/2022/10/17/ios-16-1-paste-from-other-apps-settings/
👉 Sandboxing apps and limiting their access to data are real security.
Last edited: