Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

When an app asks for permissions, it should have a “feed fake data” option

mastodon.gamedev.place

Post reply on HN
Print view View original

171–180 of 413 posts

Re: When an app asks for permissions, it should have a “feed fake data” option

#171

Post by iamcalledrob »

rollcat wrote: post #59
ryandrake wrote: post #27

I’m all for the “fake data” idea, but also: Apps should be required to gracefully handle the cases where users deny permission to access real data. I know last time I developed for iOS, it was Apple’s policy that apps cannot punish users or exit() the app in retaliation for them denying a permission. Apps must gracefully handle it and continue running. Also, and this was even longer ago, apps could not require users…

> it was Apple’s policy that apps cannot punish users or exit() the app in retaliation for them denying a permission. Meanwhile, WhatsApp still "punishes" users for denying contacts access by hiding everyone's names (only the phone numbers are shown), including for contacts that have their own names set in their own profiles. Facebook^W Meta is scum.

WhatsApp has always done this (to my knowledge). Phone numbers -> name resolution is done using your contact list. At least last time I checked.

Usernames are not given much weight in the UI--there's no guarantee that my username reflects who I really am. Feels rightly more suspicious IMO to see a message from an unknown number than from "~Elon Musk".

I believe this happens regardless of whether the app has contact permissions or not.

Re: When an app asks for permissions, it should have a “feed fake data” option

#172

Post by activiation »

corn13read2 wrote: post #134

Jailbreaks on iOS have this, I wish apple would allow us to have more control.

"Apple knows what's good for you" has been their motto since the beginning of times which is why I never had an Apple device.

Re: When an app asks for permissions, it should have a “feed fake data” option

#173

Post by tobr »

lldb wrote: post #161
ryandrake wrote: post #27

I’m all for the “fake data” idea, but also: Apps should be required to gracefully handle the cases where users deny permission to access real data. I know last time I developed for iOS, it was Apple’s policy that apps cannot punish users or exit() the app in retaliation for them denying a permission. Apps must gracefully handle it and continue running. Also, and this was even longer ago, apps could not require users…

Worst offender is google photos on iOS - you can’t even open the app without giving it all photos access. Selected photos doesn’t count. Even just to view photos already saved in the cloud.

Discussed recently on ATP[1] - this is a huge security hole. If you give access to all photos, apparently the app can search through the EXIF data to extract locations and timestamps, and build up a very accurate timeline of your whereabouts.

1: https://atp.fm/542

Re: When an app asks for permissions, it should have a “feed fake data” option

#174

Post by duxup »

dodgson wrote: post #129
duxup wrote: post #74

Earlier quoted context omitted.

> Apps must gracefully handle it and continue running. Would this include… not doing anything? A notice that to use the app that you must grant access? I hate apps that do that … BUT: I am thinking of a logistics application that I wrote that requires location access. It effectively serves no purpose without location access. It’s a small app that we offer to our clients. Not an app for the general public. But it is a…

It depends on the app. For example, I can’t view my balance in my banking app if I don’t sign in to an account, but I can find nearby ATMs or pull up the number for customer service. The logistics app could offer some features like phone numbers, support hours, or even account management features without location access, so users can still get access to those things even if they can’t enable location (or are in Airpl…

In this case the users of the app are our clients employees. No location access is not an option for them.

Nobody wants to call in their location, nor do our clients want to setup some process for that.

Re: When an app asks for permissions, it should have a “feed fake data” option

#175

Post by _Algernon_ »

davidjfelix wrote: post #18
GravitasFailure wrote: post #12

Earlier quoted context omitted.

>Google Maps: “Turn right” >Guy driving alongside the ocean: “ok” >Car: *splash* This seems like a learning opportunity. Or a Darwinian opportunity. Either way, self-solving.

That feeling when hacker news user endorses eugenics as long as its just stupid people.

Eugenics is artificial selection. This would be natural selection. Clear difference.

Re: When an app asks for permissions, it should have a “feed fake data” option

#176

Post by plagiarist »

skinner927 wrote: post #41
aftbit wrote: post #32

Earlier quoted context omitted.

Every smart home app seems to want an account on Android. Maybe they have a different path on Apple, related to HomeKit or similar, but I'm a bit skeptical.

Tasmota + CloudFree + Home Assistant and never make an account again and have full control over the devices in your home. No accounts and your lights still work when your internet is down.

I also like the part where it is harder for a device to call home if it doesn't have wi-fi at all.

Re: When an app asks for permissions, it should have a “feed fake data” option

#177

Post by ilyt »

ryandrake wrote: post #27

I’m all for the “fake data” idea, but also: Apps should be required to gracefully handle the cases where users deny permission to access real data. I know last time I developed for iOS, it was Apple’s policy that apps cannot punish users or exit() the app in retaliation for them denying a permission. Apps must gracefully handle it and continue running. Also, and this was even longer ago, apps could not require users…

> I’m all for the “fake data” idea, but also: Apps should be required to gracefully handle the cases where users deny permission to access real data.

That lies in gesture of app developer and that will not happen for the apps you'd want to use that feature (or the fake data feature) with.

Re: When an app asks for permissions, it should have a “feed fake data” option

#178

Post by maxk42 »

OJFord wrote: post #16
halfstep wrote: post #9

I really wish browsers would take this approach with notifications. If a website asks if I have notifications enabled, tell them yes, and send them all into the oblivion. Edit: to clarify, I already disable all notifications in Firefox. I was referring to websites that check via JavaScript whether you have notifications turned on and trigger a pop up to ask you to enable them.

How's that different from just having it globally disabled? I've never had a site refuse to work at all because I haven't allowed it to send desktop notifications, does that happen?

I think he's saying the JavaScript nag message every time you visit one of these sites is annoying.

Re: When an app asks for permissions, it should have a “feed fake data” option

#179

Post by wruza »

grishka wrote: post #91
rmorey wrote: post #70

Earlier quoted context omitted.

else not be allowed in the App Store, a stick apple is more than happy to wield

It should be illegal for a device manufacturer to retain any kind of control over devices after sale. Some governments are finally realizing this. So no, this is not a viable solution in the long run. Besides, Android is a thing. I personally have never used an iPhone as my real phone precisely because of this — I can't install modded apps, I can't install pirated apps, etc etc. It's not okay to have to jailbreak the…

So you and me have both worlds to choose from (not gonna reiterate pros/cons hundredth time). You are living in yours, but I have to lose mine.

By me I mean all those people who chose Apple for what it is and ignore Android for what it is, with regards to what we’re talking about.

You have no real problem, only intrusive ideology. Please relax and leave us alone. We’ll speak for ourselves when we feel wronged.

Re: When an app asks for permissions, it should have a “feed fake data” option

#180

Post by TechBro8615 »

ryandrake wrote: post #27

I’m all for the “fake data” idea, but also: Apps should be required to gracefully handle the cases where users deny permission to access real data. I know last time I developed for iOS, it was Apple’s policy that apps cannot punish users or exit() the app in retaliation for them denying a permission. Apps must gracefully handle it and continue running. Also, and this was even longer ago, apps could not require users…

> It seems they must have softened this stance because I am seeing more and more apps that require an account to function.

On Apple they compromised by requiring that apps with a login support "Sign In with Apple." Since you can signup with an anonymous iCloud email, this is almost as effective as not needing to create an account.

Post reply on HN