Tag: Play Store

  • Google Play Store Flags Safe VPNs with Verified Badge

    Google Play Store Flags Safe VPNs with Verified Badge

    Google is rolling out a “Verified” badge on the Play Store, aimed at helping users spot trustworthy VPN apps. This badge appears as a shield with a checkmark and the word “Verified.” It signifies that the VPN meets stringent security and privacy criteria, allowing users to confidently choose apps that effectively safeguard their data.

    Requirements for the Verified Badge

    To obtain this badge, VPN applications must successfully complete Google’s Mobile Application Security Assessment (MASA) Level 2 and adhere to the guidelines set by the Play Store. Developers are required to fulfill certain conditions, such as having a minimum of 10,000 installations, 250 user reviews, and being available on the Play Store for at least 90 days. Additionally, they must operate under an organizational developer account and provide a declaration in the Data Safety section, explaining how they handle user data and confirm that independent security audits have been conducted.

    Addressing Security Concerns

    This initiative responds to rising worries about malicious VPN applications that pretend to be secure tools while actually collecting user data or distributing malware. Earlier this month, Google issued warnings about seemingly legitimate VPNs being exploited as gateways for cyberattacks. With an increase in VPN usage due to privacy issues and restrictions online, the demand for clear verification has become more important than ever.

    Leading VPN Providers

    Notable VPN providers like NordVPN, Hide.me, and Aloha Browser have already been awarded the badge, showcasing their dedication to user safety. Verified applications might also enjoy more visibility on the Play Store, motivating developers to follow these guidelines.

    This action is part of Google’s wider strategy to boost transparency and security within the Play Store, building on previous updates like privacy labels and banners for independent security reviews. Last year, Google also launched a verification badge for government-developed applications, assisting users in distinguishing genuine apps from official entities.

    As cyber threats continue to evolve, the “Verified” badge represents a significant move towards empowering users to make educated decisions in an overcrowded VPN marketplace, ensuring safer and more reliable experiences with apps.

    Source:
    Link


  • Google Play Store Teases Upcoming New Android Device Category

    Google Play Store Teases Upcoming New Android Device Category

    Google is getting ready to broaden the reach of its Play Store to cover extended reality (XR) headsets, based on recent findings in the app store’s code. This development indicates that Google is setting the stage for a major entry into the XR market, possibly with its own devices or through collaborations with other companies.

    Play Store Welcomes XR

    The newest version of the Play Store app has a fresh icon showing an XR headset and mentions of “XR headset” in the app listings. This shows that Google is planning a special section for XR applications, much like the current categories for smartphones, tablets, and wearable devices.

    In the past, Google has dabbled in XR with projects like Cardboard and Daydream, but these were mainly focused on mobile virtual reality. The new support for XR headsets marks a more serious dedication to this technology and a wish to compete with other significant players in this field.

    Collaborations in the Works

    The timing of this update lines up with Google’s current partnerships with Samsung and Qualcomm on a new XR headset. This joint project is designed to create a premium XR device powered by Android and Qualcomm’s Snapdragon processors. By adding XR support to the Play Store, Google can build a strong ecosystem of applications and content for its forthcoming headset.

    While the specific aspects of Google’s XR ambitions remain uncertain, the detection of these code alterations hints that we might witness a major announcement soon. This could mean the unveiling of Google’s own XR headset, collaborations with other manufacturers, or merely an extension of the Play Store to accommodate current XR devices.

    Positive Outlook for XR

    No matter the exact direction ahead, Google’s initiative to welcome XR is a promising indicator for the technology’s future. With the backing of a significant player like Google, XR could potentially evolve into a mainstream platform for gaming, entertainment, and productivity.


    Image 1
  • Spotify Given Permission by Google to Avoid Play Store Fees

    Spotify Given Permission by Google to Avoid Play Store Fees

    Spotify’s Deal with Google to Avoid Play Store Fees

    During Google’s legal battle with Epic Games, an interesting agreement between Google and Spotify was revealed. Don Harrison, Google’s executive responsible for international partnerships, testified that Spotify had struck a generous deal with Google. Under this agreement, Spotify did not have to pay any commission to Google for users who paid their subscription fees using Spotify’s own payment method. For users who made purchases using Google’s payment method, the commission paid was only 4%.

    Google’s Privileges for Spotify

    According to Harrison, Spotify’s popularity was deemed “unprecedented” and Google believed that it was crucial for Spotify to work seamlessly within the Android ecosystem. As a result, Google granted Spotify certain privileges to ensure its smooth operation. This decision was made to prevent users from considering a switch away from Android.

    Spotify’s Criticism of Commission Rates

    Spotify has been a vocal critic of app store commission rates, particularly in the case involving Apple and Epic Games. The company has accused Apple of monopolizing the market. In fact, a few months ago, Spotify made a bold move to stop accepting payments through the App Store in an effort to avoid paying commissions to Apple.

    Overall, while the issue of app store commissions remains a topic of debate, it appears that Google has shown favoritism towards Spotify by offering a more lenient commission structure. This highlights the ongoing competition and power dynamics between app developers and the major app stores.

    Source: 1, 2

  • Play Store removes ‘Nothing Chats’ due to security concerns

    Play Store removes ‘Nothing Chats’ due to security concerns

    Nothing Chats App Removed from Google Play Store

    The Nothing Chats app, an iMessage alternative that was launched earlier this week, has been removed from the Google Play Store. The company behind the app, Nothing, initially attributed the removal to “several bugs” that needed to be fixed. However, a comprehensive technical analysis by security researchers suggests that the app’s removal was likely due to significant security concerns.

    Security Concerns Raised

    Kishan Bagaria, Founder of Texts.com, initially raised these concerns on X/Twitter. Later, the Texts.com team also published a detailed blog outlining the app’s vulnerabilities.

    Their investigation revealed that Sunbird, Nothing’s service provider, had been misleading users about the end-to-end encryption of messages routed through its servers. While messages sent to Sunbird’s servers were encrypted, the JSON Web Tokens (JWT) generated by the service were sent without any encryption to another Sunbird server, making them vulnerable to interception.

    Additionally, the messages were decrypted and stored on Sunbird servers, leaving them susceptible to unauthorized access.

    Demonstrating Vulnerabilities

    Texts.com demonstrated this by intercepting the JWTs exchanged between two devices, gaining access to the Firebase real-time database. Researchers then were able to intercept JWT tokens and access user information and conversations with just 23 lines of code.

    While the privacy issues are directly attributable to Sunbird, Nothing has drawn criticism for choosing to work with the company and for downplaying the severity of the situation by labeling it as “bugs.

    Diminishing Appeal

    With Apple’s recent announcement of RCS support, the Nothing Chats app’s appeal has diminished further. Users should exercise caution when logging into third-party services using their Apple IDs, even if encryption is promised.

    It remains to be seen whether Nothing Chats will be able to address these security concerns and make a successful return to the Play Store.