Live data from Hacker News

Google Removes Vital Privacy Feature From Android, Claims Release Was Accidental

eff.org

11–20 of 207 posts

Re: Google Removes Vital Privacy Feature From Android, Claims Release Was Accidental

#11
post #3

I think it's a great feature. There have definitely been some apps where I would have liked to use them but they've had permissions requirements that I did not believe the app's core functionality needed.

If you really want it, the CyanogenMod firware has something similar packaged with it.

Re: Google Removes Vital Privacy Feature From Android, Claims Release Was Accidental

#12
Whatever, fuck Google.

If you are interest in doing this with Android, the autopatcher[0] does this for you on a whole series of ROMs on all versions of Android from 2.x-4.x, and has been doing so successfully for a while. There is a pretty active user community on XDA for the PDroid patchset as well.[1]

[0] https://github.com/mateor/auto-patcher

[1] http://forum.xda-developers.com/showthread.php?t=1357056

Re: Google Removes Vital Privacy Feature From Android, Claims Release Was Accidental

#14
If you have root you can still enable it with market apps.[0][1]

However something like this needs to be integrated tightly like iOS and apps need to be aware they may not receive requested permissions. I still use App Ops in Kit Kat and it silently breaks apps all the time. Apps expect to be able request information (e.g. contact details) and crash or stall when they can't.

In that respect, LBE Privacy Guard[2] was a much better alternative up to ICS. It was a privacy firewall that would pop up notifications when protected permissions were being used for the first time. Instead of blocking apps when denied, Privacy Guard would feed it blank data instead. This lead to a better UX and stopped blocked apps crashing.

There needs to be an open source version of LBE Privacy Guard since the current one hasn't been updated over a year and is closed source from a Chinese company.

[0]: https://play.google.com/store/apps/details?id=com.colortiger...

[1]: https://play.google.com/store/apps/details?id=biz.bokhorst.x...

[2]: DO NOT INSTALL, FORCES REBOOT LOOP

https://play.google.com/store/apps/details?id=com.lbe.securi...

Re: Google Removes Vital Privacy Feature From Android, Claims Release Was Accidental

#15
post #5
post #3

I think it's a great feature. There have definitely been some apps where I would have liked to use them but they've had permissions requirements that I did not believe the app's core functionality needed.

every time I open facebook messanger with gps enabled, I see it querying my location. I hate it so much. Would love to be able to turn that off

Well ...

Re: Google Removes Vital Privacy Feature From Android, Claims Release Was Accidental

#16

> When asked for comment, Google told us that the feature had only ever been released by accident — that it was experimental, and that it could break some of the apps policed by it. Oh, it would definitely break some apps. Considering it would introduce new uncertainty. It's still an amazing feature.

Yeah, because checking return codes and error values is overrated

Thanks Google, for making my phone less secure.

Re: Google Removes Vital Privacy Feature From Android, Claims Release Was Accidental

#17
post #6

It's been a pretty shitty week for privacy, hasn't it? First the Disqus hack, then the changed Block feature on Twitter, and now this?

The changed block feature on Twitter didn't do anything negative for privacy.

It took away users' ability to block other users from viewing their tweets? How is that not privacy?

Re: Google Removes Vital Privacy Feature From Android, Claims Release Was Accidental

#18
This is one area where iOS stands head and shoulders above Android. I used to run Cyanogenmod and I remember deciding to not upgrade the Facebook app because doing so would have required giving it a slew of permissions, including the ability to "directly call phone numbers".

By contrast, in iOS, I can choose which apps have access to my location, contacts, etc.

I know that Apple's track record when it comes to privacy isn't exactly spotless but Google would be well advised to follow their lead in allowing users granular control over 3rd-party apps' permissions.

Re: Google Removes Vital Privacy Feature From Android, Claims Release Was Accidental

#19
The original intention (as explained by Dianne Hackborn among others) is that if the user sees the app requesting too many capabilities... the user should simply choose not to install the app. Having the user needing to understand all the different capabilities is too much. Having a bunch of pop-ups (cough Vista) is also bad UI design.

The current set of capabilities is too technical for end users to really understand. This all need to be collapsed into a few broad areas like "tracks your location" that have clear, clickable explanations.

For the privacy paranoid, having a configurable way to just inject false data would be great. Have a single fake IMEI number, for example. Then for apps, the API call doesn't fail, it just returns the fake number.

Re: Google Removes Vital Privacy Feature From Android, Claims Release Was Accidental

#20
This is a pretty disturbing trend. Just recently I ran into problems with a TV station's app on iOS that refused to play video without Location Services Enabled. I don't mind a general region being disclosed, but the house-level accuracy of the location data definitely creeps me out. I don't think the general public realizes location can be equivalent to a person's id.
Post reply on HN