{"id":27769,"date":"2020-06-26T13:42:07","date_gmt":"2020-06-26T17:42:07","guid":{"rendered":"https:\/\/www.kaspersky.com.au\/blog\/apple-app-clips-android-instant-apps\/27769\/"},"modified":"2020-06-29T21:36:29","modified_gmt":"2020-06-29T10:36:29","slug":"apple-app-clips-android-instant-apps","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com.au\/blog\/apple-app-clips-android-instant-apps\/27769\/","title":{"rendered":"What are App Clips and Instant Apps?"},"content":{"rendered":"<p>A few days ago, at its worldwide developer conference (WWDC 2020, held in full virtual mode because of the coronavirus outbreak), Apple unveiled the next version of iOS. One of its innovations is App Clips, mini apps that can begin running on the device without having to be installed.<\/p>\n<p>Apple requires these programs to be no more than 10MB so they can load and run instantly. If the app seems useful, the user will have the option to download the full version at any time and switch to it.<\/p>\n<p>In addition, Apple recommends that App Clips be used in conjunction with the <a href=\"https:\/\/www.kaspersky.com\/blog\/sign-in-with-apple\/27436\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Sign In with Apple<\/a> feature and, of course, Apple Pay. This eliminates another two painful stages preventing people from starting using apps quickly: registration and entering payment data.<\/p>\n<h2>Why App Clips?<\/h2>\n<p>Apple provided some practical examples of how App Clips could prove useful. Say you\u2019re walking down the street, see an electric scooter, and decide to rent it. Before App Clips, that would have involved downloading and installing an app, registering, and linking it to a payment card. Then you might face a wait while the rental system carried out the necessary checks.<\/p>\n<p>However chic the scooter, its appeal fades in the face of such virtual red tape.<\/p>\n<p>In the shiny new world of App Clips, it should all be a breeze. You scan the graphic code or NFC tag with your smartphone; the mini app starts instantly; you log in through Sign In with Apple, pay the fee through Apple Pay, and scoot off into the sunset.<\/p>\n<p><span class=\"embed-youtube\" style=\"text-align:center; display: block;\"><iframe class=\"youtube-player\" type=\"text\/html\" width=\"640\" height=\"390\" src=\"https:\/\/www.youtube.com\/embed\/IqP_iojZXxQ?version=3&amp;rel=1&amp;fs=1&amp;showsearch=0&amp;showinfo=1&amp;iv_load_policy=1&amp;wmode=transparent\" frameborder=\"0\" allowfullscreen=\"true\"><\/iframe><\/span><\/p>\n<p>The graphic code or NFC tag is designed to simplify user interaction with physical objects in the real world, like the aforementioned scooter or a billboard. Links perform an analogous role in the virtual world.<\/p>\n<p>For another example, say you search for home food delivery. You see an ad in the results and click on it. With App Clips, the corresponding mini app starts instantly, and you can use it to select a tasty-looking meal, pay with Apple Pay, and just wait for the delivery.<\/p>\n<p>A third example: More and more cities worldwide are introducing app-based parking payment, but at the same time, traditional parking meters (not to mention staffed payment booths) are expensive and becoming obsolete.<\/p>\n<p>But occasional or one-time city visitors are unlikely to waste time searching and installing \u2014 and registering with, and linking a credit card to \u2014 a local parking app. Here again, mini apps can come to the rescue. You run the app instantly, use Apple Pay to pay for parking, and go about your business.<\/p>\n<input type=\"hidden\" class=\"category_for_banner\" value=\"ksc-trial-generic\">\n<h2>Google\u2019s alternative: Android Instant Apps<\/h2>\n<p>For all of Apple\u2019s hype, App Clips is nothing new. Google presented a mini-app concept three years ago at its own annual developer conference, Google I\/O 2017. In the Androidverse, it goes by the name Android Instant Apps.<\/p>\n<p>Unveiling the technology, Google was somewhat more open about the real reason behind it. Instant Apps can greatly facilitate users\u2019 lives in various scenarios, at least in theory, but app developers are the real beneficiaries.<\/p>\n<p><span class=\"embed-youtube\" style=\"text-align:center; display: block;\"><iframe class=\"youtube-player\" type=\"text\/html\" width=\"640\" height=\"390\" src=\"https:\/\/www.youtube.com\/embed\/oispNrpGnIY?version=3&amp;rel=1&amp;fs=1&amp;showsearch=0&amp;showinfo=1&amp;iv_load_policy=1&amp;wmode=transparent\" frameborder=\"0\" allowfullscreen=\"true\"><\/iframe><\/span><\/p>\n<p>The two largest app stores \u2014 Apple\u2019s App Store and Google Play \u2014 are home to <a href=\"https:\/\/www.statista.com\/statistics\/276623\/number-of-apps-available-in-leading-app-stores\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">millions of unique programs<\/a>, and it is becoming increasingly difficult for users to find a specific app inside the virtual haystack. Meanwhile, developers are having trouble making their creations stand out among the endless competition.<\/p>\n<p>Instant Apps lend a hand by giving users a chance to try them immediately, without having to navigate a labyrinth of offers. And if an instant app makes a good impression, the user is much more likely to install the full version.<\/p>\n<p>One common use of Android Instant Apps is to demo ultralight versions of games. In the form of an instant app, the user is offered, say, one level of the game. The main attraction is not having to install anything \u2014 you can play right there and then. And if you\u2019d like to play the next level, you can download the full version and get sucked in.<\/p>\n<p>The scheme is very similar to sample tasting in grocery stores. Instead of consuming abstract advertising or a promotional sample that\u2019s best opened at home, you can try the product on the spot, and if you like it, buy it.<\/p>\n<input type=\"hidden\" class=\"category_for_banner\" value=\"kisa-generic-2\">\n<h2>Are the apps safe?<\/h2>\n<p>The very concept of running something without installation sounds a little suspicious. The usual rules of digital hygiene state that before installing anything, you should do some due diligence: research the developer\u2019s reputation, read user reviews, and scan the downloaded file with antivirus software at the very minimum.<\/p>\n<p>Instant launch contradicts that common wisdom. What if the app is dangerous? Sure, you download mini apps from the same app store as their full versions, but that\u2019s no guarantee everything\u2019s on the  up and up. Google Play is <a href=\"https:\/\/www.kaspersky.com\/blog\/phantomlance-android-backdoor-trojan\/35234\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">no stranger<\/a> to <a href=\"https:\/\/www.kaspersky.com\/blog\/camscanner-malicious-android-app\/28156\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">malicious apps<\/a> and <a href=\"https:\/\/www.kaspersky.com\/blog\/dresscode-android-trojan\/13219\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Trojans<\/a>.<\/p>\n<p>The potential danger should not surprise you; app stores are teeming with millions of apps that get updated regularly, and a common practice among cybercriminals is to upload a clean app and then update it with malicious features. Even powerhouses such as Apple and Google don\u2019t have the resources to go over such a vast number of programs with a fine-tooth comb.<\/p>\n<p>There\u2019s another problem. For Instant Apps to work, certain launch mechanisms are used to bypass the standard installation procedure. Cybercriminals can exploit flaws in these mechanisms. In December 2019, at the Chaos Communication Congress hacker conference, Chinese security researcher RonnyXing presented a report examining several <a href=\"https:\/\/fahrplan.events.ccc.de\/congress\/2019\/Fahrplan\/events\/10751.html\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">practical ways to attack instant apps<\/a>.<br>\nHe showed that they are vulnerable to information leakage, identity theft, account hijacking, and other unpleasant things. According to RonnyXing, up to 60% of Android devices are prone to this type of attack.<\/p>\n<h2>How to keep Android Instant Apps under control<\/h2>\n<p>Like the full apps on your phone, instant apps need to be kept on a short leash. At a minimum, you should periodically review the list of recently used ones. To do that, go to <em>Settings<\/em>, select <em>Google<\/em>, and tap <em>Instant Apps<\/em>. You can also disable the <a href=\"https:\/\/support.google.com\/googleplay\/answer\/7238856?hl=en\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Instant Apps feature<\/a> there.<\/p>\n<p>There\u2019s good news as well. We created and <a href=\"https:\/\/pdfpiw.uspto.gov\/.piw?PageNum=0&amp;docid=10691801\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">recently patented<\/a> a technology for protecting your smartphone against malicious instant apps. So, there shouldn\u2019t be any need to worry: simply install <a href=\"https:\/\/www.kaspersky.com.au\/mobile-security?icid=au_kdailyplacehold_acq_ona_smm__onl_b2c_kdaily_wpplaceholder_sm-team___kisa____f4d699061e0733ea\" target=\"_blank\" rel=\"noopener\">Kaspersky for Android<\/a> and no malicious apps, neither traditional nor instant, will be of any danger.<\/p>\n<input type=\"hidden\" class=\"category_for_banner\" value=\"kisa-generic\">\n","protected":false},"excerpt":{"rendered":"<p>At WWDC 2020, Apple rolled out App Clips for iOS. We explain what that \u2014 as well as Android Instant Apps \u2014 is.<\/p>\n","protected":false},"author":2581,"featured_media":27770,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[7,1789],"tags":[3228,105,3317,14,2754,2755,3318,1250,3728,423,3319],"class_list":{"0":"post-27769","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-products","8":"category-technology","9":"tag-36c3","10":"tag-android","11":"tag-app-clips","12":"tag-apple","13":"tag-ccc","14":"tag-chaos-communication-congress","15":"tag-instant-apps","16":"tag-ios","17":"tag-kaspersky-for-android","18":"tag-mobile-devices","19":"tag-wwdc"},"hreflang":[{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/apple-app-clips-android-instant-apps\/27769\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/apple-app-clips-android-instant-apps\/21486\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/apple-app-clips-android-instant-apps\/16955\/"},{"hreflang":"ar","url":"https:\/\/me.kaspersky.com\/blog\/apple-app-clips-android-instant-apps\/8387\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/apple-app-clips-android-instant-apps\/22689\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/apple-app-clips-android-instant-apps\/20783\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/apple-app-clips-android-instant-apps\/19162\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/apple-app-clips-android-instant-apps\/23031\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/apple-app-clips-android-instant-apps\/22111\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/apple-app-clips-android-instant-apps\/28648\/"},{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/apple-app-clips-android-instant-apps\/8514\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/apple-app-clips-android-instant-apps\/36040\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/apple-app-clips-android-instant-apps\/15169\/"},{"hreflang":"pt-br","url":"https:\/\/www.kaspersky.com.br\/blog\/apple-app-clips-android-instant-apps\/15740\/"},{"hreflang":"pl","url":"https:\/\/plblog.kaspersky.com\/apple-app-clips-android-instant-apps\/13628\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/apple-app-clips-android-instant-apps\/24591\/"},{"hreflang":"zh","url":"https:\/\/www.kaspersky.com.cn\/blog\/apple-app-clips-android-instant-apps\/11629\/"},{"hreflang":"ja","url":"https:\/\/blog.kaspersky.co.jp\/apple-app-clips-android-instant-apps\/28748\/"},{"hreflang":"nl","url":"https:\/\/www.kaspersky.nl\/blog\/apple-app-clips-android-instant-apps\/25623\/"},{"hreflang":"ru-kz","url":"https:\/\/blog.kaspersky.kz\/apple-app-clips-android-instant-apps\/22528\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/apple-app-clips-android-instant-apps\/27610\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com.au\/blog\/tag\/mobile-devices\/","name":"mobile devices"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/posts\/27769","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/users\/2581"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/comments?post=27769"}],"version-history":[{"count":1,"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/posts\/27769\/revisions"}],"predecessor-version":[{"id":27771,"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/posts\/27769\/revisions\/27771"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/media\/27770"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/media?parent=27769"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/categories?post=27769"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/tags?post=27769"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}