Edgar Cervantes / Android Authority
In a nutshell, Android 15 may introduce a new Enhanced Confirmation Mode to prevent malicious apps from exploiting OS vulnerabilities. Android currently restricts users from easily enabling Accessibility or Notification Listener services for sideloaded apps. However, Android 15 will close the loophole in this method. While most users download apps from official app stores like Google Play, some prefer sideloading apps from alternative sources. This practice allows for third-party app installation outside of Google Play, making Android more open compared to iOS. Nonetheless, this also leads to the misconception that Android is less secure.
Regardless of app sources, Android’s privacy and security features prevent unauthorized access to sensitive permissions without user consent. However, sideloading apps from non-official sources poses higher risk due to less regulation compared to Google Play. Malicious apps often seek access to Accessibility and Notification Listener APIs for nefarious activities. While Google Play has measures to control API usage, Android relies mainly on app declarations. Android 13 restricts Accessibility and Notification Listener services for sideloaded apps, marking them as “restricted settings.”
To combat exploitation of this security feature, Google plans to introduce Enhanced Confirmation Mode in Android 15. This feature adds tighter controls compared to Restricted Settings. Enhanced Confirmation Mode will check an allowlist in the factory image to exempt trusted packages from restrictions. Apps installed by trusted installers will also be exempt. This change closes the loophole in Android 13 and strengthens security against malicious apps seeking highly privileged permissions. The feature is not yet activated in the latest Android 15 Beta 1.1 update, but it shows promise in enhancing security.
While details on how the feature will work with legitimate sideloaded apps are unclear, Google’s initiative to enhance Android security is commendable. The implementation of Enhanced Confirmation Mode will bring added protection to Android users. Stay tuned for more updates on this feature in Android 15. Have insider info? Reach out to us at news@androidauthority.com. We value your input, whether you choose to remain anonymous or receive credit for your information.