Live data from Hacker News

Facebook can now read your texts

tony.calileo.com

111–120 of 226 posts

Re: Facebook can now read your texts

#112

Don't forget that Google Hangouts now has access to all your texts, too, now.

Err, yes, but on any modern version of Android, Google Hangouts is the SMS app - so I thing that's a bit of a red herring, and completely unrelated.

> Google Hangouts is the SMS app

What do you mean by that? It asked me if I want it to handle my sms, I said no. It asked me again when I updated to 4.4, I said no again. I can (and will) keep saying no...

Re: Facebook can now read your texts

#115
post #89

Earlier quoted context omitted.

This sounds excellent, I can't believe I never tried it yet! Of course, this should be part of core Android, but I guess there is no hope for that (given that Google makes its dough on advertising).

It used to be, called App Ops. It was in for (one?) point release before google promptly withdrew it again after realising that giving people tools to protect their privacy goes against their mission.

They didn't really withdraw it, they just hid it better. I downloaded App Ops X and it still works fine on 4.4.whatever.

Re: Facebook can now read your texts

#116

This has been a thing for about a month and a bit now. A Facebook engineer posted the following on Reddit[0], explaining the rationale behind the SMS permission: > As for the READ_SMS permission, we require that so we can automatically intercept login approvals SMS messages for people that have turned 2-factor authentication for their accounts, or for phone confirmation messages when you add a phone number to your Fa…

The problem with many permission systems, such as this one, is that the developer of an app can't indicate to the user /why/ it needs a certain permission. Second, that the user cannot allow/disallow the permission at the time of installation, and that the app / app developer can then indicate, like in this case, that automatic two-factor authentication won't work. Which is fine.

tl;dr: Android's permission system does not allow for transparency from the developers. It makes the app developers look like douchebags going 'I WANT TO READ ALL YOUR TEXTS', instead of a 'I'd like to make things a little easier for you by automatically intercepting two-factor authentication texts'.

Re: Facebook can now read your texts

#117

At this point, if you care about your privacy, why would you even still have a Facebook account? I used to think I could be 'safe', that my advanced knowledge of privacy settings and optimised usage patterns could somehow shield me from the fundamental nature of these data monger corporations. But the truth is concepts like cloud and social networking are fundamentally toxic to privacy and freedom. I'm now pretty clo…

>At this point, if you care about your privacy, why would you even still have a Facebook account?

You could have a Facebook/Google account under a different name. I have one and its rather useful when websites have an option of logging in using facebook/google accounts.

>I'm now pretty close to the day I delete my Google account, and that provides far more useful functionality than Facebook.

What is this "far more useful" functionality ?

Re: Facebook can now read your texts

#118
The RSA had a similar new permission recently, the ability to use your camera. With the knowledge of the NSA's backdoor to RSA encryption, I'll continue to refuse the update. I know that I'm being on the paranoid side, but I'd rather be paranoid than blindly accept these kinds of new requests. Facebook is out of control. They are trying to get their hands on as much of your personal data as possible. That alone should be enough for us to quit.

Re: Facebook can now read your texts

#119
post #70

The main reason I rooted my Android phone is to run AppOps 4.3/4.4. I can revoke permissions from apps, just like the one in the linked article. This should be a standard part of Android, in my opinion. The app, for those curious (I have no affiliation with it): https://play.google.com/store/apps/details?id=com.colortiger... My favorite permissions to revoke are: Wake lock, Location, Read contacts. As a result, I get…

What does revoking the wake lock do, both to the app and the phone?

Re: Facebook can now read your texts

#120

Is there any recourse short of "don't use the app" that regular users have against this sort of thing? Is there no meaningful way to push back against Facebook for demanding this permission?

If you have a Samsung Android phone, there's a Permissions Manager that allows you to firewall what apps can and can't do. Same as Cyanogenmod without having to root your phone.

No there isn't.
Post reply on HN