Hacker News Reader

The high availability of pirated APKs could make it easy to sneak something in to a relatively popular app.

This is one reason why you'd have to be crazy to pirate a keyboard app for instance.

If your targets are loading pirated APKs onto their phones, you don't need any other security vulnerabilities...

Often I see people installing leaked updates for apps like Gmail which are shared through Dropbox, etc. These would normally not install because they don't have matched signatures, unless something like this vulnerability was used.

pirated apps are still subject to Permissions; they aren't less secure than non-pirated apps like, say, Path.

Reply on news.ycombinator.com