Just a smol with big opinions about AFVs and data science. The onlyfans link is a rickroll.

~$|>>> Onlyfans! <<<|$~

  • 0 Posts
  • 377 Comments
Joined 3 years ago
cake
Cake day: October 11th, 2023

help-circle




  • Oh, very different thing. When that happens it’s just asking permission for an applink query - which is just a flag that tells the user’s OS to check and see if any currently installed apps are associated with a given URL and then passes it to that app if there is one.

    It’s very different from trying to get the user to sideload an entire app. “Open in app” is not really a threat vector, but installing random unverified .apk is the threat itself.


  • Ah, yeah DDG uses the google Being browser engines.

    I think there’s confusion about what we’re talking about:

    • DDG the web page search engine uses the bing crawler.
    • DDG the web browser, which is contemporary to firefox uses webkit and blink

    Yeah, but that it’s a rejectable download isn’t really the issue here. That it’s, unprompted, trying to get me to sideload a random .apk at all and hijacking my clipboard is the problem.

    I’m curious what western social media apps have attempted to directly download the .apk onto your device - I’ve had plenty that throw up splash pages that redirect me to google play store, but no legitimate site has ever unprompted served me a raw .apk before. That’s behavior you find on the AI slop sites that are just long strings of search terms to try and get you to click on them.



  • Ah, yeah DDG uses the google browser engines. That could easily explain the different behavior.

    It appears to be trying to force the download of the tiktok .apk directly - I haven’t compared the hashes but at least that’s what the names indicate. But the download, and the inserting random strings into my clipboard, happens without interaction a few seconds after the page loads. It’s very odd behavior to see from a legit site.




  • Um… this isn’t misinformation. Heres one of the .apks it tries to download, the others are apparently all variations on that name - if this is just tiktok, then it’s still a pretty huge problem that it’s attempting to force-download itself onto my phone and is copying random stuff (the string “677e2163cbeed74442e2247e575770983c98bc9a30c649a397010bd06f476ef8” from that screenshot, there’s others I’ll spare you) onto my clipboard.