Hacker News Reader

I am curious why Total Commander is the only one that is signaled out? There are thousand apps that are capable of doing this and TC is the only one that Google have an issue with. I feel that there is something more to the story. I read the article and Dev seemingly didn't do anything wrong but yet something fishy going on since Solid Explorer, F-Droid, Firefox, etc does not receive those notice from Google AFAIK.

View on HN

Maybe they've deployed some new scanning tools. Looks like google thinks the code is used by TC to update itself.

Yeah if this was "just" a file manager that could potentially download APKs if you paste in a direct URL or connect to a file share then there's no way automated testing would have flagged this. The changelog seems to mention a "backup/restore" feature for APKs which seems different than just triggering an open intent.

Reply on news.ycombinator.com