Fake WhatsApp App Downloaded 1 Million Times (fortune.com) 51
An anonymous reader quotes Fortune:
Reddit users yesterday spotted an extremely convincing spoofed copy of the popular WhatsApp messenger on Google Play. The fake was downloaded by more than 1 million users, who instead of a messaging tool wound up with a bundle of ads... The fake WhatsApp was nearly indistinguishable from the real thing thanks to an invisible space placed at the end of the developer's name.
One of the security hounds discussing the case on Reddit pointed out that this was not an isolated incident, even for WhatsApp. A search for "WhatsApp" on Google Play currently shows no fewer than seven spoof apps using slight variations on the developer name "WhatsApp Inc.", including versions with extra spaces, asterisks, or commas. All of them have four-star review averages, presumably thanks to industrial-scale subversion of Play's review system.
One of the security hounds discussing the case on Reddit pointed out that this was not an isolated incident, even for WhatsApp. A search for "WhatsApp" on Google Play currently shows no fewer than seven spoof apps using slight variations on the developer name "WhatsApp Inc.", including versions with extra spaces, asterisks, or commas. All of them have four-star review averages, presumably thanks to industrial-scale subversion of Play's review system.
Re: (Score:2, Interesting)
As a modern day tech giant, they're undoubtedly beholden to several important populist grass roots movements as a matter of course,
but if you think that changes the mission statement for market share, market share, market share... well, you're missing the value the Googly is willing to place upon appearances for the sake of the greater good.
Re: (Score:1)
their shit "works", huh? with fucking amateurish errors like this? filtering inputs is the first fucking thing you learn, for fucks sake. this is absolutely inexcusable.
captcha: distrust
Re: (Score:2)
The GV app for iOS hasn't worked for me in months. Calls never complete.
Re: (Score:1)
As a modern day tech giant, they're undoubtedly beholden to several important populist grass roots movements as a matter of course
And you know they're important because Google promotes people saying they're important to the top of the search results and removes videos critical of them from YouTube.
Re: (Score:2)
Review process (Score:2)
Doesn't Google review any app on their store?
Re: (Score:3)
Why would they? It's all about freedom for developers to upload anything they want.
Re: (Score:2)
Yeah, they probably outsource it to India or Russia.
Re: (Score:2)
Re: (Score:2)
Apple has the same problem.
Really?
Find me more than a small handful of short-lived instances of nefarious apps (out of millions) that have ever appeared in the Apple App Store.
I don't use nor trust google play (Score:2, Informative)
I use, for example: https://f-droid.org/en/packages [f-droid.org]
Re:I don't use nor trust google play (Score:4, Insightful)
How to download WhatsApp from Fdroid?
Re: (Score:3)
If you think the WhatsApp app is a repackaged website, you need to choke to death on your phone.
Re: (Score:2)
At 77 megs it's a fucking lot of bloat for a fucking text routing protocol.
Re: (Score:2)
After reading through their FAQ's - I had to use google to find any docs on how to install it. But on a standard google phone - to install it and use it I have to turn off APK signing - which (using irony here) sounds way more secure. Some the features it has as well require root...
I'm sure if its integrated with the phone's rom its probably fine.
I have to wonder what the point is though - its more secure because they only allow open source applications on it? Assuming you know how to audit source code for
The star rating system is kind of dumb anyway. (Score:2)
If you are rating an app and you have nothing to compare it against, how do you know whether it's a good app? Should you give it the benefit of the doubt and rate it a 5, or should you give it a 3 because you don't know whether it's good (5) or bad (1)?
A better rating system would make you put two apps of the same type in order from most to least liked, and justify your reasoning for the metamoderators. Then the polling software would use Condorcet or whatever to put all apps of that type in order from most
Re: (Score:3)
Re: (Score:2)
If the bots can push a fake app up to 4 stars to obfuscate the 1 star reviews, they can just as easily flood the app with "Best Evah" moderations in the scheme you propose.
Re: (Score:2)
and you have nothing to compare it against
And what makes you think there's nothing to compare it against? Are you telling me the many millions of apps on the Play Store are all 100% unique in terms of functionality? Have you never abandoned one music player in favour of another?
Actually what the rating really is is a thumbs up or thumbs down rating with the average number between them a representation of the relative thumbs. Lots of 5 star ratings, no problem lots of 1 star ratings, lots of problems. Just because this doesn't form a detailed review
Re: (Score:2)
And what makes you think there's nothing to compare it against? Are you telling me the many millions of apps on the Play Store are all 100% unique in terms of functionality? Have you never abandoned one music player in favour of another?
That there are apps to compare against for most apps doesn't mean that the reviewers have something to compare it against.
Most consumers try something, and if they like it, they'll give it 5 stars. Even worse, they are more likely to rate an app that's new to them than one that they continue to use over a long time.
When looking at reviews, I discard all 5 star reviews as unreliable, and then subtract 1 and finally multiply by 2.5, and I get a more believable 0-10 score. Similar for scoress on other sites
Re: (Score:2)
When looking at reviews, I discard all 5 star reviews as unreliable, and then subtract 1 and finally multiply by 2.5, and I get a more believable 0-10 score.
You're turning the rating into something it isn't and extracting data that isn't there. Your algorithm also doesn't result in a 0-10 score, just results in rescaling the 0-4 score to 0-7.5 and then by looking only at a portion of the low results you're achieving absolutely nothing.
Go back, understand how people post, understand that that doesn't make 5 star as unreliable but rather as a key part of the equation, (somehow you managed the former and then concluded the latter which is absurd) and then analyse
Re: (Score:2)
by looking only at a portion of the low results you're achieving absolutely nothing.
3 star and 4 star are not low results. In a five star system, 3 is average, i.e. no worse than the average competition, and 4 is better than average.
2, 3 and 4 star scores are mostly results from people who actually though before submitting, unlike most of the 5 star scores and some of the 1 star scores, which are binary scores.
IMBD knows this too, and their ranking algorithm takes into account that scores of 10, and to a lesser extent 1, carry far less information useful for ranking[*], and especially whe
Re: (Score:2)
from people who actually though before submitting
Which shouldn't be confused with people who actually proofread before submitting.
Mea culpa.
Re: (Score:2)
3 star and 4 star are not low results.
To quote someone:
Most consumers try something, and if they like it, they'll give it 5 stars.
Before you continue your thoughts, maybe you should come to terms in your own mind about how you think the ratings system works. Or is someone else posting on your behalf? Or maybe split personality disorder?
Re: (Score:2)
Maybe it blows your mind that there's no discrepancy between 3 and 4 stars not being low results and 5 stars meaning someone liked it?
Nothing mod-worthy ... (Score:5, Insightful)
I'm carrying ten mod points and there isn't one goddam comment (as of this writing) that's of any value.
Including mine.
Re: (Score:2)
Because some old dinosaurs who have something worthy to say on the topic exist...
It's not you or me.
Subversion? (Score:2)
Why would you assume industrial scale subversion in order to get high rankings? If an app is fake and yet works as intended there's no reason to believe that a user won't give it a 5 star rating if they don't notice a problem.
Shocked (Score:1)
So you're saying Google, an ad company which doesn't seem to employ any actual humans you can talk to isn't doing a good job of removing fake apps which only show ads?
I'm shocked!
Great News (Score:1)