Live data from Hacker News

Facebook can now read your texts

tony.calileo.com

151–160 of 226 posts

Re: Facebook can now read your texts

#151

Earlier quoted context omitted.

They didn't really withdraw it, they just hid it better. I downloaded App Ops X and it still works fine on 4.4.whatever.

Do you have a link to the google play store? I tried to find it and couldn't. I would love to download it.

I think this is it: https://play.google.com/store/apps/details?id=com.colortiger...

Re: Facebook can now read your texts

#152

Earlier quoted context omitted.

Do you have a link to the google play store? I tried to find it and couldn't. I would love to download it.

I think this is it: https://play.google.com/store/apps/details?id=com.colortiger...

Yep, that's the one!

Re: Facebook can now read your texts

#153
post #70

The main reason I rooted my Android phone is to run AppOps 4.3/4.4. I can revoke permissions from apps, just like the one in the linked article. This should be a standard part of Android, in my opinion. The app, for those curious (I have no affiliation with it): https://play.google.com/store/apps/details?id=com.colortiger... My favorite permissions to revoke are: Wake lock, Location, Read contacts. As a result, I get…

What does revoking the wake lock do, both to the app and the phone?

I've used it in cases where there isn't interaction with the user and I want to keep the screen on. I don't think it handles any type of security.

Re: Facebook can now read your texts

#154

At this point I'm running at least 2 versions behind on the facebook app. I didn't install it last time it asked me to allow it to "Send emails to guests [of events] without host's knowledge" among other things. I see now that they also want to be able to connect and disconnect from WiFi. The Facebook app is probably the fastest way to find a list of all permissions in the Android system. "Draw over other apps", "Rea…

Same here - about running 2 versions behind, at least. I haven't deleted the app yet, but I refuse to give it permission to send or read texts without my knowledge or permission. I don't care what their explanation is for wanting those permissions, but they're not necessary and not something I'm willing to trust Facebook with.

Re: Facebook can now read your texts

#155
post #112

Earlier quoted context omitted.

Err, yes, but on any modern version of Android, Google Hangouts is the SMS app - so I thing that's a bit of a red herring, and completely unrelated.

> Google Hangouts is the SMS app What do you mean by that? It asked me if I want it to handle my sms, I said no. It asked me again when I updated to 4.4, I said no again. I can (and will) keep saying no...

They removed the default messenger and combined it with hangouts so they can have a ubiquitous chat service like imessage on iOS.

Re: Facebook can now read your texts

#156

This has been a thing for about a month and a bit now. A Facebook engineer posted the following on Reddit[0], explaining the rationale behind the SMS permission: > As for the READ_SMS permission, we require that so we can automatically intercept login approvals SMS messages for people that have turned 2-factor authentication for their accounts, or for phone confirmation messages when you add a phone number to your Fa…

A better alternative would be to ask the user each time to check if the SMS was received, that would ensure some trust.

You can't just peek into the entirety of user's SMS and justify it's for the security of your users.

At least put an option to give users a choice and not force them to have their their SMS read in the name of innovation, or explain why you read them and that need just that one SMS.

Re: Facebook can now read your texts

#157

Earlier quoted context omitted.

Do you have a link to the google play store? I tried to find it and couldn't. I would love to download it.

I think this is it: https://play.google.com/store/apps/details?id=com.colortiger...

Thanks!

Re: Facebook can now read your texts

#159
post #14

The title of this thread should be modified with the addition of: "if you use an Android phone."

... but nonetheless it's an important example of the erosion of data privacy. Just as users are getting accustomed to clicking past EULA's so to they click past these permission request screens, and if they don't then the app keeps nagging them ... the user just wants to use the app, so permission granted.

Re: Facebook can now read your texts

#160

Is there any recourse short of "don't use the app" that regular users have against this sort of thing? Is there no meaningful way to push back against Facebook for demanding this permission?

I am not a Facebook app user since closed my account years ago so maybe not the best person to comment but... I have never understood why one needs an app to view a website? Facebook has a mobile site that works yes?
Post reply on HN