Live data from Hacker News

When an app asks for permissions, it should have a “feed fake data” option

mastodon.gamedev.place

131–140 of 413 posts

Re: When an app asks for permissions, it should have a “feed fake data” option

#131
I would make the case that fake data isn't a sustainable model as it spend fuel and energy to support an activity that does not have meaningful contribution to society and the economy.

We should base our state of the art on best use of the finite resources we have.

Re: When an app asks for permissions, it should have a “feed fake data” option

#132
post #65

As an app developer I do not like this idea. You want to break the contract on what that permission is intended to be. ("Weather the Trip" road trip weather app for the U.S.)

As another app developer, I don't care. You aren't meant to request permissions you don't legitimately need for the app to function. Everyone understands that a map or weather app needs access to precise location, or that an app that takes pictures needs access to the camera. But games requesting storage or location or microphone or contacts, and refusing to run without these permissions? They should rightfully get w…

> Heck, even the internet access (android.permission.INTERNET) should be a runtime permission. A fakeable one, too.

That would be something for sure

Re: When an app asks for permissions, it should have a “feed fake data” option

#135
post #54

I’m all for the “fake data” idea, but also: Apps should be required to gracefully handle the cases where users deny permission to access real data. I know last time I developed for iOS, it was Apple’s policy that apps cannot punish users or exit() the app in retaliation for them denying a permission. Apps must gracefully handle it and continue running. Also, and this was even longer ago, apps could not require users…

> Apps should be required to gracefully handle the cases where users deny permission to access real data Or else? You're suggesting an organizational solution to a technical problem. This can't possibly work. Fake data is the only practical solution to this, such that the app would see the permission as granted when it is not actually granted.

The technical solution is to make the output of having denied permission identical to the output of there being no data. On iOS, if you deny permission to access devices on the local network, the app has no way of knowing - it just sees that there are no devices available.

Re: When an app asks for permissions, it should have a “feed fake data” option

#136

Earlier quoted context omitted.

Why? I don't enable notifications and it's fine, I've never had a problem. If you don't want notifications, why would you still want the website to send them?

Some websites will check whether you have notifications enabled and spawn an in-page pop up requesting access before they trigger the actual, native browser request. So ideally this would stop that from happening.

It is so common that r/assholedesign has a specific rule not to post that kind of asshole design (because it is now boring).

But sites that do it are hostile and should just be blocked. What other shenanigans are they pulling?

Re: When an app asks for permissions, it should have a “feed fake data” option

#137
post #74

I’m all for the “fake data” idea, but also: Apps should be required to gracefully handle the cases where users deny permission to access real data. I know last time I developed for iOS, it was Apple’s policy that apps cannot punish users or exit() the app in retaliation for them denying a permission. Apps must gracefully handle it and continue running. Also, and this was even longer ago, apps could not require users…

> Apps must gracefully handle it and continue running. Would this include… not doing anything? A notice that to use the app that you must grant access? I hate apps that do that … BUT: I am thinking of a logistics application that I wrote that requires location access. It effectively serves no purpose without location access. It’s a small app that we offer to our clients. Not an app for the general public. But it is a…

One middle ground between requiring location access and failing to run at all would be to ask the user to provide an address. That way the user would have some control over what info they provide.

Re: When an app asks for permissions, it should have a “feed fake data” option

#138

Earlier quoted context omitted.

Eugenics aside, people very regularly follow satnav directions completely blindly, the most recent one I can think of being the person who drove directly into the sea in Hawaii. If there's an opportunity for learning, it's not being taken

You say "very regularly" but when was the last time you saw/heard about that happening? I'm in the UK and I saw that Hawaii story and I can't remember hearing about anything similar for years. So my conclusion is that, out of an 8bn population, one or two making such a mistake once every few years is nothing.

I'll grant you that people driving into the sea is not a regular occurrence, but local news of people driving the wrong way up one way streets or onto unpaved roads and getting stuck happens way more often.

I guess on a planetary scale that's vanishingly rare, but most things are at that scale too.

If we're going to think at those levels, nothing that happens in the UK really matters as we're less than 1% of the world's population...

Re: When an app asks for permissions, it should have a “feed fake data” option

#139
post #100

Earlier quoted context omitted.

XPrivacy was incredibly cool. But on modern phones rooting and installing Xposed has either gotten massively more complicated or disabled ougright. GrapheneOS wasn't working with banking apps, Google broke rooting via Magisk multiple times on the Android Beta and at some point and i stopped bothering. Maybe GrapheneOS or similar Projects could do this

FWIW: Rooting seems fairly easy at this point in time , at least for pixel devices. Flash with magisk, install Universal Safetynet Fix ( https://github.com/Displax/safetynet-fix/ ) and you're passing safetynet / play integrity API. I haven't come across a single app that doesn't work due to root currently, but I limit my installed apps.

You pass basic safety net. You do this by claiming that your device is an older device that doesn't support hardware attestation. I can only assume that in some small number of years hardware attestation is going to be required and will require software exploits to work around.

Re: When an app asks for permissions, it should have a “feed fake data” option

#140
post #32

Earlier quoted context omitted.

Every smart home app seems to want an account on Android. Maybe they have a different path on Apple, related to HomeKit or similar, but I'm a bit skeptical.

Tasmota + CloudFree + Home Assistant and never make an account again and have full control over the devices in your home. No accounts and your lights still work when your internet is down.

I love my home assistant installation and didn’t even know about Tasmota/Cloudfree. Thanks for sharing, this is the next logical step to fully detaching from subscriptions/accounts.
Post reply on HN