Live data from Hacker News

When an app asks for permissions, it should have a “feed fake data” option

mastodon.gamedev.place

141–150 of 413 posts

Re: When an app asks for permissions, it should have a “feed fake data” option

#141

As an app developer I do not like this idea. You want to break the contract on what that permission is intended to be. ("Weather the Trip" road trip weather app for the U.S.)

I'm going to write a free/no-ad version of this app solely out of spite for this kind of viewpoint. Be on the lookout for my app, "Weather Trip Report" app in a few weeks.

anonymously? where is your honor?

I think I'll win more share of the U.S. market wink nudge nudge

Re: When an app asks for permissions, it should have a “feed fake data” option

#142
post #104
post #86

Earlier quoted context omitted.

Worse, you can't even initiate conversations; if you've denied contacts access, the other user has to message you first. At least for me on Android, which is wild.

The iOS shows a phone number input if you try to initiate a chat and have contacts permissions disabled. I'm not sure whether that's because it's to comply with app store regulations, or the product owners on both sides prioritizing different things. On both platforms you can still initiate chats without contacts access by using the wa.me domain, eg. wa.me/12125551234 for +1 (212) 555 1234.

Alternatively on Android, the app "Click to chat" is a tiny utility that directly opens up a WhatsApp chat with any given number:

https://play.google.com/store/apps/details?id=com.trianguloy...

Re: When an app asks for permissions, it should have a “feed fake data” option

#143
post #33
post #17

Unfortunately this approach makes you quite unique for fingerprinting

Why? Only if you would reuse the same data multiple times, or if you use a unique random generator that is easily distinguishable from other data. So maybe don't use the 5x5 island, but when done right the approach shouldn't help fingerprinting?

Exactly. Just pick a random location on the planet and have it randomly wander. Have a consistent but (statistically) different location per-app.

Re: When an app asks for permissions, it should have a “feed fake data” option

#144

Earlier quoted context omitted.

>Google Maps: “Turn right” >Guy driving alongside the ocean: “ok” >Car: *splash* This seems like a learning opportunity. Or a Darwinian opportunity. Either way, self-solving.

> This seems like a learning opportunity. Or a Darwinian opportunity. Not for the passengers.

It was when it happened to me, though yes, Darwinism for the passengers is much less valuable.

Re: When an app asks for permissions, it should have a “feed fake data” option

#145
post #9

I really wish browsers would take this approach with notifications. If a website asks if I have notifications enabled, tell them yes, and send them all into the oblivion. Edit: to clarify, I already disable all notifications in Firefox. I was referring to websites that check via JavaScript whether you have notifications turned on and trigger a pop up to ask you to enable them.

Just disable notifications. There's a setting for it in Chrome and Firefox, I'm sure there's a setting for Safari and the various Chromium forks as well. Set the notification permission to "deny by default" so you can manually opt into notifications later on a per site basis.

Yup. I have this on Firefox. Makes the web so much better. The only indication that the site asked for notifications is that there is a subtle "notifications denied" icon in the location bar. For the maybe two sites where I have enabled notifications I just click it and allow them.

Re: When an app asks for permissions, it should have a “feed fake data” option

#146
post #91
post #70

Earlier quoted context omitted.

else not be allowed in the App Store, a stick apple is more than happy to wield

It should be illegal for a device manufacturer to retain any kind of control over devices after sale. Some governments are finally realizing this. So no, this is not a viable solution in the long run. Besides, Android is a thing. I personally have never used an iPhone as my real phone precisely because of this — I can't install modded apps, I can't install pirated apps, etc etc. It's not okay to have to jailbreak the…

> It's not okay to have to jailbreak the thing to make it usable.

I guess we'll have to tell millions of users that their iPhones are all unusable, then. Imagine the shock!

Re: When an app asks for permissions, it should have a “feed fake data” option

#147
GrapheneOS has features that allow this to various extents, for example storage scopes which trick the app into believing it has all the storage permissions it requested, or contact scopes which give an app access to whatever subset of contacts you decide on (including none). Similar feature exists for sensors and possibly others I've forgotten or am unaware of.

Re: When an app asks for permissions, it should have a “feed fake data” option

#148
post #137
post #74

Earlier quoted context omitted.

> Apps must gracefully handle it and continue running. Would this include… not doing anything? A notice that to use the app that you must grant access? I hate apps that do that … BUT: I am thinking of a logistics application that I wrote that requires location access. It effectively serves no purpose without location access. It’s a small app that we offer to our clients. Not an app for the general public. But it is a…

One middle ground between requiring location access and failing to run at all would be to ask the user to provide an address. That way the user would have some control over what info they provide.

Agree. Any app that requires location access should be able to accept a manually introduced location as a fallback when the user doesn't desire to grant location permission.

Which is consistent with what would happen anyways with the above idea of providing fake data when the permission is rejected.

Re: When an app asks for permissions, it should have a “feed fake data” option

#149
I recall holding off on WhatsApp for so long because they wanted access to my contacts to do anything really useful. With Exchange students it really became critical to have it, so I caved and gave Meta the data. I’m still a little mad about it. Clearly they could’ve made an app that did not require access to my contact information, but they wouldn’t.

Re: When an app asks for permissions, it should have a “feed fake data” option

#150
Why do we need to be awful? Here is a simple rule: No is an option, unless it's really not an option. If it's not an option, you need to be very clear about why (in the app application process maybe), otherwise your app gets declined.

i.e. if tiktok/ig asks for permissions on camera and microphone, no is an option, because you don't need either to use either. If parts of your app can feasibly be used by a user without certain permissions it is on you to design the app in a way where that is possible. No camera or microphone enabled? Conditionally disable the functionality that would require those.

To make this simpler, the burden is on the asker. If you are not clear or trying to be clever, the answer is no. If that sounds draconian, keep in mind, that the app creator has the option to completely forgo this additional step by creating an app that makes permissions optional.

Focusing on enforcing that would make a petty army race unnecessary, and it's the better call for humans anyway.

Post reply on HN