The fact that the Chinese company Huawei is not going through the best of times is not news. Due to US sanctions, the company cannot use Google's suite of services on its smartphones, but it has its own alternative - AppGallery, which is essentially a Chinese counterpart to the Google Play Store.
AppGallery, which is used in many Huawei phones, appears to have a rather large problem that the company's technicians have no way of solving. According to the latest reports, one programmer reported the existing vulnerability back in February, but the problem has not been fixed until now.
It turns out that thanks to the existing loophole, anyone with a bit of programming knowledge and the time and desire can essentially download and install any app in the Huawei AppGallery for absolutely free. And it doesn't matter that it is paid. It is easy to predict that while this may be good news for some, it is catastrophic news for app developers.
Dylan Roussel, the developer who found the problem, points out that the problem is not caused by the fact that the app developers themselves do not enable license verification in their applications. It turns out that the latter problem is related to Huawei, which does not offer any paid app protection until now.
Roussel himself was able to download and use at least a few paid apps by exploiting this vulnerability. This is obviously problematic because those with malicious intent can use the API to download many paid apps at once, preventing app developers from earning as much as they would otherwise.
No comments:
Post a Comment