When you upload an app to Market, there could be a check to see if the
package name starts with a domain name. If it does, and you haven't used
that domain name before, the Developer Console could ask you to enter an
email address from the same domain name and then send you a verification
email.

If the package name does not start with a valid domain name then you
wouldn't need to verify.

This wouldn't stop people using package names like com.gmail.fraudster, but
it would stop com.mycompany.fraudster.

Another idea would be to "claim" a domain name. Once claimed, no other
person would be allowed to upload an app with a package name starting with
that domain name. This is more tricky because there would need to be a whole
process behind someone illegally claiming a domain name like gmail.com!
Maybe a threat of deleting their account would be enough.

On 17 June 2011 04:15, Mike Wolfson <[email protected]> wrote:

> ...and for many apps, there is no need for a web component, thus there
> would not be a matching domain.
>
> A little off the subject, but still relevant.  I find it troubling
> that any user could upload an app with the same Application name (not
> package name).  The malware attack from a few months ago (the
> "DroidDream" one) was an example of this.  The malicious developer
> uploaded a lot of apps with the same name as popular apps, in hopes
> that consumers would search, then mistakenly download their infected
> app.
>
> I worry about this, as I have spent a lot of time creating a "brand"
> and it could very easily be hijacked by another user (or competitor
> trying to benefit from searches for my app).
>
> I could Trademark my name, but this is prohibitively expensive.
>
> It would be great, if the Market could provide a "Verified Account"
> designation or something to ensure "spoofers" aren't able to take
> advantage of this loophole.
>
>
>
> On Jun 16, 9:38 am, Linux Box Solutions <[email protected]>
> wrote:
> > You app name does not have to reference a domain name
> >
> >
> www.YouTube.com/user/linuxboxsolutionwww.Krzyview.comwww.Email-Marketers.com
> >
> > On Jun 16, 2011, at 12:05 PM, Peter Sinnott <[email protected]> wrote:
> >
> >
> >
> >
> >
> >
> >
> > > That seems a little silly to me. Anyway I hope whatever new protocol
> > > they invent at least includes emailing the person involved.
> >
> > > On Jun 16, 1:09 pm, String <[email protected]> wrote:
> > >> On Thursday, June 16, 2011 8:09:05 AM UTC+1, Tim in Boulder wrote:
> >
> > >> I always thought it odd that anyone could effectively have an
> >
> > >>> application id com.google.blah.blah if they wanted
> >
> > >> That's an excellent point. Ideally, registering an app for sale should
> > >> require you to give an email address at the domain being used in the
> package
> > >> name, and the app doesn't go live until you click on a link in an
> email sent
> > >> to that address. Wonder if someone should suggest that
> b.android.com...
> >
> > >> String
> >
> > > --
> > > You received this message because you are subscribed to the Google
> Groups "Android Discuss" group.
> > > To post to this group, send email to [email protected].
> > > To unsubscribe from this group, send email to
> [email protected].
> > > For more options, visit this group athttp://
> groups.google.com/group/android-discuss?hl=en.
>
> --
> You received this message because you are subscribed to the Google Groups
> "Android Discuss" group.
> To post to this group, send email to [email protected].
> To unsubscribe from this group, send email to
> [email protected].
> For more options, visit this group at
> http://groups.google.com/group/android-discuss?hl=en.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Android Discuss" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/android-discuss?hl=en.

Reply via email to