For years, Android has allowed apps to modify the behavior of other applications, using Accessibility Services. While the intended purpose is for developers to create apps for users with disabilities, the API is often used for other functionality (to overlay content, fill in text fields, etc.). LastPass, Universal Copy, Clipboard Actions, Cerberus, Signal Spy, Tasker, and Network Monitor Mini are just a few examples of applications heavily using this API. Although Accessibility Services can greatly extend the functionality of applications, they can potentially create a security risk.
Google has stated that Android app developers violating its Accessibility Services by so doing creating cyber security issues would have to be forced to take their software off Play Store to better help users with disabilities, Android has a set of Accessibility Services that developers can use to improve their applications.
“Google is most likely cracking down on Accessibility Services use due to security reasons. While applications like LastPass use the available APIs to identify password fields in other apps, this level of access can be used maliciously,” tech portal Android Police reported earlier this week.
Google has sent a broadcast email to developers, stating that “unless developers can describe how the app properly uses the Accessibility Services to help users who are disabled, it will need to remove all requests for accessibility services or it will be taken off of the Play Store”. Apps such as Last Pass, Universal Copy, Clipboard Actions, Cerberus, Tasker and Network Monitor Mini use the service.
The new directive could have major ramifications for several apps, especially those intended for customisation. Also added in the report by Google which explained that “All violations are tracked. Serious or repeated violations of any nature will result in the termination of your developer account, and investigation and possible termination of related Google accounts.”
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
