So let me get this straight...
This malware payload can be dlownloaded, installed and executed without any kind of administrator/root access - the only things blocking it is a setting in a database and the end user being smart enough to not just say "ok" to all the permissions the app asks for?
Good grief, if this were Windows XP instead of Android and an EULA instead of permissions, I'd swear we were back in the early 2000s again...
Then again, Google have built their entire business on slurping as much data about everything as possible - I guess if they tried to stop anyone else doing it, they could be seen as a monopoly... oh, wait...
Biting the hand that feeds IT
