search

noties / Markwon

Android markdown library (no WebView)
https://noties.io/Markwon/
Apache License 2.0
2.75k stars 311 forks source link

Malware warning? #25

Closed jeremy303 closed 6 years ago

jeremy303 commented 6 years ago

My Android device is reporting the Markwon sample app as malware. Any ideas why?

noties commented 6 years ago

Hey! What malware detector are you using? I think it's because it's debuggable, but I personally have no idea why would this be considered harmful in any way.

jeremy303 commented 6 years ago

I didn't notice anything that should raise flags either, so I was left scratching my head too.

This is an Asus ZenPad 8, which I believe is just using the malware detection from Google Play. I haven't yet uncovered any logs that might give more information about why the binary was flagged.

Oddly, it doesn't complain about the debug build of my app which is now including Markwon. I just received this device for a project, so I haven't yet had an opportunity to see if this is general issue with other projects I build.

noties commented 6 years ago

Hey!

I might suggest that your malware detector listens for installation of APKs that were downloaded and opened via application installer. I cannot agree more that there is a possibility of installing a malware on your device with this method, but blindly mark all downloaded APKs as vulnerable is a bit off.

To prove we can do this: install the same APK that you can download from releases tab via ADB. I think this way it won't be marked as malware. Still just a thought, I might be wrong.