TikTok wants Android users to sideload its app

Gotcha.

Though, “social eng” attacks add another human in the loop. I mean, even the all-expensive silicon root-of-trust business wouldn’t help. It is an umbrella attack and valid against security posture of most (if not all) software (not just Linux distros or Android, like you singled them out).

Previously:

Signal doesn’t defend against someone shoulder surfing you reading your messages … also doesn’t try to defend against malware reading your message database ref.

2 Likes