Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Permissions asked for by Uber Android app

gironsec.com

Post reply on HN
Print view View original

61–70 of 164 posts

Re: Permissions asked for by Uber Android app

#61

Post by revelation »

andymcsherry wrote: post #34

There's perfectly reasonable explanation for almost all of these permissions, and there's nothing in this analysis that suggests they're doing otherwise. The only one that I couldn't think of was WRITE_SETTINGS Permissions ACCESS_COARSE_LOCATION & ACCESS_FINE_LOCATION: Fairly obvious, they need to figure out where to pick you up ACCESS_NETWORK_STATE, ACCESS_WIFI_STATE , INTERNET: They need to figure out if you have i…

This is like saying we should give everyone root access because there are legitimate situations where that is warranted and not misused.

I mean, I might trust my neighbor with the key to my apartment, but I'll still call the cops when he comes in and trashes the place.

Similarly, maybe there are valid reasons for Uber to have these permissions. That doesn't mean they can upload a dump of whatever data they can find to their servers.

Re: Permissions asked for by Uber Android app

#62

Post by benigeri »

blhack wrote: post #47

A LOT of this stuff is pretty easily explainable. They want access to SMS and phone calls because the Uber app uses those things. Camera doesn't seem terribly implausible. IT could be an incoming feature that allows you to take a photo of where you are so that your driver can find you more easily. The WiFi stuff is probably related to location. edit: as pointed out below, this is so that you can take a photo of your…

They let users take pictures of debit/credit cards for easy input.

Re: Permissions asked for by Uber Android app

#64

Post by 2xlbuds »

blhack wrote: post #47

A LOT of this stuff is pretty easily explainable. They want access to SMS and phone calls because the Uber app uses those things. Camera doesn't seem terribly implausible. IT could be an incoming feature that allows you to take a photo of where you are so that your driver can find you more easily. The WiFi stuff is probably related to location. edit: as pointed out below, this is so that you can take a photo of your…

Uber uses the card.io SDK to let you enter your credit card information by taking a picture of the card, which requires the camera permission.

Re: Permissions asked for by Uber Android app

#66

Post by blhack »

2xlbuds wrote: post #64
blhack wrote: post #47

A LOT of this stuff is pretty easily explainable. They want access to SMS and phone calls because the Uber app uses those things. Camera doesn't seem terribly implausible. IT could be an incoming feature that allows you to take a photo of where you are so that your driver can find you more easily. The WiFi stuff is probably related to location. edit: as pointed out below, this is so that you can take a photo of your…

Uber uses the card.io SDK to let you enter your credit card information by taking a picture of the card, which requires the camera permission.

HOW DARE THEY!

Thanks, I forgot about that since it's been so long.

Re: Permissions asked for by Uber Android app

#70

Post by waterlesscloud »

methehack wrote: post #43
amirmc wrote: post #32

Earlier quoted context omitted.

> "... but as far as I can see, that blog provides no evidence that Uber is actually phoning home" That does not make it ok.

It may not be ok, but it's completely different, imo. If they're not using the libraries, they can change it and no big deal. If they are using the libraries and stealing all this information that doesn't belong to them, that feels criminal to me (or ought to be). So...I'd love to know...are they really doing this?

It does make a huge difference. I'm uninstalling, but at this point I just needed an excuse.

If they're actually sending all this stuff, I'm also telling everyone I know about it. But only if they actually are.

Post reply on HN