Feeds

New Google Play terms ban non-store app updates

Rug pulled from under Facebook's auto-updates

Security for virtualized datacentres

Google has amended the policies of its Play app store for Android to prohibit third-party app update mechanisms, in a move seemingly designed to put the kibosh on a contentious feature being tested by Facebook.

As of Friday, the "Dangerous Products" section of the Chocolate Factory's Google Play Developer Program Policies - which prohibits such things as Trojans, viruses, and spyware - now includes an additional sentence:

An app downloaded from Google Play may not modify, replace or update its own APK binary code using any method other than Google Play's update mechanism.

In other words, apps sold through Google Play must also distribute all future updates through Google Play, which in turn ensures that the updates will be subject to the Chocolate Factory's security and other policies.

El Reg contacted Google to learn the reason for the new language, but we received no response. But the change does appear to be aimed at Facebook, which in March began testing a version of its Android app that can download security fixes and feature updates automatically in the background, via a "silent update" feature.

"We're working quickly to improve Facebook for Android and want to make sure everyone is using the best version of our app," explains an entry on the social network's Help Center.

Helpfully, the Facebook app will only auto-update over Wi-Fi, so it won't sap users' data plans. But the silent update feature still stirred up some controversy, because it requires users to disable the Android feature that blocks installation of apps from sources other than Google Play. Third-party app stores are widely considered a leading vector for Android malware.

More generally, apps that can modify their own code without Google's intervention make it harder for the online giant to police its app store for spyware, scams, and other illicit doings. A user might download a seemingly innocuous app from Google Play, for example, only to have the app later update itself with new code that turns it into spyware.

Under the new wording of Google's developer policies, all such mechanisms, including the one being tested by Facebook, are clearly verboten.

Note, however, that the new restriction only applies to apps purchased through Google Play. Apps purchased through Amazon's Appstore, for example, can still receive updates via any mechanism that Amazon's terms allow.

The policy also doesn't appear to apply to Facebook Home, the social network's "immersive" Android skin, when it comes pre-installed on phones such as the HTC First – although it's not yet clear how Facebook plans to distribute updates for those devices.

The Register reached out to Facebook to learn what its next move might be in light of Google's policy change, but a spokesperson declined to comment. ®

Secure remote control for conventional and virtual desktops

More from The Register

next story
Not appy with your Chromebook? Well now it can run Android apps
Google offers beta of tricky OS-inside-OS tech
Keep that consumer browser tat away from our software says Oracle
Big Red decides it will only support Firefox's Extended Support Releases
Greater dev access to iOS 8 will put us AT RISK from HACKERS
Knocking holes in Apple's walled garden could backfire, says securo-chap
NHS grows a NoSQL backbone and rips out its Oracle Spine
Open source? In the government? Ha ha! What, wait ...?
Google extends app refund window to two hours
You now have 120 minutes to finish that game instead of 15
Intel: Hey, enterprises, drop everything and DO HADOOP
Big Data analytics projected to run on more servers than any other app
prev story

Whitepapers

Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.