zlacker

>>fsflov+(OP)
I am the first to be on the "I own my phone let me do whatever the heck I want with it" but recently something hit me.

DJI forces you to side load their app for their Air Units and Drones. And this is scary. It looks like the rule they violate for the play store is that their app can self modify.

Let that sink in ... Any tension or whatever political bull crap happens and you have a state controlled malware on your device that can do anything it wants with your drone.

Millions of people installed this without really understanding what could be the consequences...

>>gbin+Va
The solution to this is better controls over what the DJI apps can actually do, not having Google pretend to check all apps for malicious code.

Google clearly knows this. IMO the motivation here is obvious, and it isn't security.

>>IshKeb+Bp
I find it interesting that all the things Apple did from the start in the name of security, Google is slowly needing to do over time in the name of security. Meanwhile, various parties (the EU being the big one) are pushing to have Apple role back some of these controls.

>>al_bor+AA
The parent is telling you what the obvious, correct solution is: secure the runtime. That's how MacOS stops attackers, that's how Windows stops attackers, and there's no reason to pretend that smartphones are some unique situation. Runtime security should not ever be treated as optional.

US Senators like Ron Wyden would probably tell you that Apple's approach harms your security overall. After all, he was the one that whistleblew Apple's hidden and warrantless Push Notification surveillance pipeline. Forcing you to rely on a first-party service you can't replace is never a secure option, not in the US nor Europe.