Application permissions in the best privacy phone

 A significant Android security leak was exposed by a post on Google's Android Partner Vulnerability Initiative (APVI) website. Devices from Samsung, LG, Xiaomi, and many other companies are exposed to extremely risky malware programs as a result of the leak. These applications have access to the impacted devices on a par with the operating system. this could not happen with the best privacy phone, the most secure smartphone, an encrypted phone or an untraceable phone.

Numerous Android smartphones are susceptible to harmful malware applications.

The problem is caused by stolen platform certificates. The legitimacy of the Android version on a device is determined by these certificates or signing keys. These certificates are also used by vendors to sign apps. While the Android operating system gives each app a distinct user ID (UID) after installation, apps that share the signing keys can also have a shared UID and access to each other's data. This approach also grants the same privilege to apps that are signed with the same certificate as the OS. It is because the applications have system rights that it is possible to use this flaw. It is also through this way that applications such as Whatsapp or Facebook have access to all the data of the phone, whether you give them the permissions or not. To be protected, you need at least the best privacy phone.

The issue here is that some businesses have experienced the improper distribution of their Android platform certifications. Today, dangerous apps are signed using the certificates with the same rights as the Android OS. Without user interaction, the apps can acquire system-level access rights on the impacted devices. Therefore, once the malware-infected app is loaded on a device, its creators can access any data they desire from it without the victim being aware of it (via).

This vulnerability is made considerably riskier by companies signing apps with platform certificates. In order to deceive potential victims into installing new apps, the bad actors don't even need to create any new apps. Instead, they may simply take a program that has been signed using the stolen keys, like Samsung's Galaxy Watch plugins and Bixby Routines, add malware to it, then sign it again using the same key and release it as an update. Of course, they can distribute the program through the Play Store, but even if consumers sideload the malicious app, Android would accept it as a valid update.

Manufacturers who have been impacted by Google have taken corrective action.

Google claims that this Android security breach was originally discovered in May of this year. The breach has already "taken corrective actions to minimize the user effect," according to all affected manufacturers. However, those who already have the malicious app loaded on their device may still be at risk.

The problem here is people trying to enter your privacy without your permission. malware is by definition bad. but what about other applications that do exactly the same thing but legally. does that make it right? Do you have a choice anyway? And if the answer is yes, would you make the right choice? Today you finally have this choice, The Cosmic Dolphins is a Swiss company that makes its own phones, the best privacy phone, the most secure smartphone, encrypted phone and untraceable phone are now a reality.