Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Popular Google Play store apps are abusing permissions and committing ad fraud

buzzfeednews.com

Post reply on HN
Print view View original

91–100 of 178 posts

Re: Popular Google Play store apps are abusing permissions and committing ad fraud

#91

Post by zambal »

codedokode wrote: post #85
gameswithgo wrote: post #7

the locked in store model has completely failed. both for ios and android it is a terrible experience compared to PC. you are stuck with only the search tools the hardware maker gives you, often designed in a user hostile way (ios brings up ads) and no way to bail out to a different store. as well the monoculture leads to a race to the bottom with garbage programs shoving their way to the top via misleading a dishone…

But Linux is not better. Android at least has permissions for apps and allows you to deny some of it; on a typical desktop Linux distribution or on Windows every app has full access to all of your data: a calculator can read your browser history. If you install the Slack app from Deb package on Linux, it will add its repository into APT sources list which means that Slack Inc. can now "patch" any program on your syst…

That's why I hope snap or flatpack will gain more momentum. While I assume they still are far from perfect at the moment, they seem to me a step in the right direction for desktops and servers.

Re: Popular Google Play store apps are abusing permissions and committing ad fraud

#92

Post by stubish »

codedokode wrote: post #85
gameswithgo wrote: post #7

the locked in store model has completely failed. both for ios and android it is a terrible experience compared to PC. you are stuck with only the search tools the hardware maker gives you, often designed in a user hostile way (ios brings up ads) and no way to bail out to a different store. as well the monoculture leads to a race to the bottom with garbage programs shoving their way to the top via misleading a dishone…

But Linux is not better. Android at least has permissions for apps and allows you to deny some of it; on a typical desktop Linux distribution or on Windows every app has full access to all of your data: a calculator can read your browser history. If you install the Slack app from Deb package on Linux, it will add its repository into APT sources list which means that Slack Inc. can now "patch" any program on your syst…

Checkout snaps, where packages are preferred sand boxed and locked down, and require explicit permission from store operator and the user to install with unrestricted rights https://snapcraft.io/

Re: Popular Google Play store apps are abusing permissions and committing ad fraud

#93

Post by gloflo »

LoSboccacc wrote: post #72
stephenr wrote: post #68

Earlier quoted context omitted.

Im generally not a fan of web apps but this is incorrect. https://developer.mozilla.org/en-US/docs/Web/API/Geolocation

can't see anywhere mentioned geofencing.

Geofencing is just conditionally acting depending on a location. All you need for it is a location.

Re: Popular Google Play store apps are abusing permissions and committing ad fraud

#94

Post by DarwinMailApp »

rayraegah wrote: post #15

It's not just ad fraud, they've been copying information like whatsapp phone number, reddit username, telegram username etc. https://www.reddit.com/r/miband/comments/8eqtve/why_did_mifi...

I actually can't believe this. How in the name of all the is holy are we letting them get away with this.

Sure, we talk about the problem a lot. But we need to take action. It seems every big corporation are abusing the trust we give them in some form or another.

Please, for the love of God, can anybody prove me wrong. Are there any companies than don't abuse our trust?

Re: Popular Google Play store apps are abusing permissions and committing ad fraud

#95

Post by _phaq »

codedokode wrote: post #87
Sylos wrote: post #65

Earlier quoted context omitted.

Just get a written permission from all of your contacts that you're allowed to upload their data to WhatsApp, like the rest of us clearly have. Or make it so that no one has anything against you ever. Because people have been sued already for uploading their contacts' information to WhatsApp without permission. I really don't want to encourage you to use WhatsApp, but one possible solution would be to use this app: h…

Isn't exporting a contact list a violation under GDPR? Contact names and their phone numbers are a personal information and the app must get that person's consent to process their data.

Let me put it like this: I consider it only a matter of time before a lawsuit for this completes and Facebook has to pay a multi-million dollar fine. A lawsuit against WhatsApp was filed in the night that the GDPR became active: https://noyb.eu/4complaints/

The lawsuit is not just for this matter, it's rather because users were forced to consent to the privacy policy in order to continue using the services, which is very hard to justify under the GDPR, but I presume/hope, they will also look into what WhatsApp wanted users to consent to and how they presented it (89 screens full of legalese).

In theory, there is some clause in WhatsApp's terms of service which requires every user to get that written permission from all their contacts that I joked about.

One actual thing that WhatsApp will be able to cling to, is that they do have a 'legitimate interest'. Without uploading these contacts, their service would not anymore grow at even just half the pace.

Re: Popular Google Play store apps are abusing permissions and committing ad fraud

#96

Post by HenryBemis »

rayraegah wrote: post #15

It's not just ad fraud, they've been copying information like whatsapp phone number, reddit username, telegram username etc. https://www.reddit.com/r/miband/comments/8eqtve/why_did_mifi...

I keep sounding like a broken record. This is not for your "average user" but I use two methods to block all data transmissions for applications that doesn't make sense to have internet connections (e.g. a selfie app):

a) The device's App-Data settings. I keep most boxes unchecked. I don't understand why CamScanner (legit super useful app) needs internet connection when I just email myself all the scans, and not using the cloud-options. Only Email needs internet connection on that scenario.

b) NoRoot Firewall, I either recognize the IP or the domain name, or I check on ipaddress.com the IP, and then I end up global-blocking the whole block of that IP and be done with it.

In this world you have to go with Security in mind. Default state is block-everything, and only allow the truly needed/useful (to me, not the app developer) connections to go through.

Re: Popular Google Play store apps are abusing permissions and committing ad fraud

#97

Post by z3t4 »

nemothekid wrote: post #12
gameswithgo wrote: post #7

the locked in store model has completely failed. both for ios and android it is a terrible experience compared to PC. you are stuck with only the search tools the hardware maker gives you, often designed in a user hostile way (ios brings up ads) and no way to bail out to a different store. as well the monoculture leads to a race to the bottom with garbage programs shoving their way to the top via misleading a dishone…

> and yea i know you can sideload on android, but the unwashed masses don’t know that so it doesn’t matter. Then what is your solution? The unwashed masses tried the wild wild west of digital software delivery back in the 2000s. It ended with tears, viruses, UAC and SaaS. Even today, most sideloading, for general consumers, begins with trying to pirate apps and ends with even more invasive spyware. The locked in stor…

Funny thing is the pirated apps often remove spyware and other crap.

Re: Popular Google Play store apps are abusing permissions and committing ad fraud

#99

Post by gyaniv »

I'm not entirely sure I have that much of a problem with ad fraud, doesn't it only hurt the ad companies and companies like google (which I have a problem with anyway), by basically scamming them into believing that I interacted so that company should be compensated.

I do object to collecting and sending my personal information, but I feel they just mixed it, as that probably relates to more then just these Chinese apps.

And I really don't like the fact that it seems that Google only cares about abusing the users, and breaches of trust and privacy when it hurts the advertisers (and themselves), and not when the normal user gets hurt.

Not surprising though, but still annoying.

Re: Popular Google Play store apps are abusing permissions and committing ad fraud

#100

Post by SmellyGeekBoy »

nwellinghoff wrote: post #62
tty2300 wrote: post #49

Earlier quoted context omitted.

I would find it acceptable if side loading apps was allowed by default but sideloaded apps are blocked from the dangerous permissions like device admin and draw over screen. Apps that really do require this have to be checked by a maintainer or require the device to be in developer mode. This way almost everyone is happy because most apps don't really require anything other than internet, camera and GPS which can be…

This. Google and Apple should make it easy for computer literate people to use something more advanced. Have the unwashed massed version sure, but then let us override it in a graceful manner instead of having to jump through hoops. Would lead to all kinds of free innovation etc. that they could then take over and profit from. Use the computer literate! WE WILL FIX IT FOR YOU

What? It's already possible for the "computer literate" to sideload apps on Android. That's literally what this whole thread is about?
Post reply on HN