Since Android 13, Google This made it difficult for us to enable accessibility permissions in apps we installed from outside an app store like Google Play, even though there was still a loophole that allowed it. Under Android 15, apparently this problem will be resolved.
In apps installed from their APK, you cannot easily enable accessibility permissions or notification access permissions, because they are restricted. Although it is possible to remove the restriction manually, malware creators have found a loophole to bypass even the restriction. This should not be possible on Android 15.
Restricted and more restricted settings
Not all Android permissions are the same. Accessibility permissions and notification access They are particularly dangerous since the first allows an application to see everything that happens on the screen and manipulate the mobile and the second to read and interact with notifications. These are two old acquaintances of all types of fraudulent and malicious applications.
Since Android 13, the creators of this type of malware have had life a little more difficult, since these applications are normally distributed outside of Google Play, for example with a link that reaches us by SMS, WhatsApp or on a fake website. When an application was installed from an unknown source, There are limitations to whether you can grant accessibility permissions and access to notifications.
I made the law, I made the trap. The problem with the above implementation is that the restrictions apply to apps installed outside of an app store, but any app can pretend to be an app store and install apps that require accessibility permissions. In this case, these installations will not have their settings restricted.
The above measure is very useful for secondary app stores, but not so much for security. Android 15, as Mishaal Rahman reports, will be a bit more restrictive in this regard. will have a closed list of allowed app stores and packages
This change This will prevent one application from installing another and this second one does not have restricted permissions Have used the Install API that Google uses to identify installs from an app store.
However, the fact that the whitelist of authorized stores is closed and within the system presents certain problems for the new application stores which are launched and are not included at launch. We’ll have to see what Google has in mind on this subject: for now These lists are empty in Android 15 beta.
Via | Android Authority
In Xataka Android | All phones updated to Android 14 and when will they start updating