Live data from Hacker News

Android: I don't need your permission

blog.danlew.net

131–140 of 190 posts

Re: Android: I don't need your permission

#131

Earlier quoted context omitted.

That the phone application is launched does not mean the user is currently in a call, they could be browsing their contacts list.

Skype is an even worse example too, I use it for IM more than calls and it presumably stays open for a long time, probably forever on those occasions.

Skype wants to BE your phone app. It is not allowed.

Re: Android: I don't need your permission

#132
post #41

I wish it was that easy in all cases. For VLC on Android, we need the READ_PHONE_STATE permission, in order to stop the music when a phone call is coming in. We just use it to make pause on incoming call. (VLC on Android is also an audio player, with a background audio service). The catch is, this is not an Intent you can send or request easily. We tried so many other ways, but none work. But on the play store it's w…

I'm not doubting that you've thought things through and you're correct, but could you explain why handling audio focus events isn't enough? http://developer.android.com/training/managing-audio/audio-f...

I've been working on a streaming music player for Android lately. After doing some basic testing on one device, onAudioFocusChange seems to be all I need to duck and pause/resume for incoming calls, but I'd like to make sure I handle all the corner cases correctly.

Re: Android: I don't need your permission

#133
post #41

I wish it was that easy in all cases. For VLC on Android, we need the READ_PHONE_STATE permission, in order to stop the music when a phone call is coming in. We just use it to make pause on incoming call. (VLC on Android is also an audio player, with a background audio service). The catch is, this is not an Intent you can send or request easily. We tried so many other ways, but none work. But on the play store it's w…

This. This is why I am moving to iOS. I installed Pocket. It wanted permission Contacts and Calendar. Contacts, I understand for sharing purposes. Calendar? Yeah, fuck off. Maybe they are bundled together like "read phone status and identity" and Pocket has no way around it. Maybe it is not. As a user, I should not have to worry about that. Contact and Calendar in no way should be bundled together.

VLC isn't available on iOS anymore. At least not in Apple AppStore in Europe :/

Rumors say Apple removed/hide VLC. Though Apple hasn't removed all the shady gray-zone VLC closed source forks that float around in AppStore with questionable Ads and micropayments. The original VLC is still there for Jailbreak users: http://www.videolan.org/vlc/download-ios.html

Re: Android: I don't need your permission

#134
post #106

Earlier quoted context omitted.

It almost seems like they do it intentionally to improve tracking and desensitize users. Only a terrible engineer would think needing to know if the phone is ringing needs a permission, let alone one that provides unique IDs plus the phone numbers on phone calls. It's one more reason I've gone from loving Google to actively avoiding them. (Also, they've very aggressive in getting people to turn on location info and h…

Adding to that: In Android Lollipop, One can't edit / delete local (phone-stored) contacts. They have to be synced to cloud in order to edit / delete them. If this is intentional, it is a sick dark UI pattern.

It wouldn't matter if contacts were encrypted client-side, but Google seen to have a severe allergy to client-side encryption. Mozilla are really leading the way on this issue.

What I think is particularly sad is that Google could still make a huge amount of money without exposing one's private information directly.

Re: Android: I don't need your permission

#135
post #77

Earlier quoted context omitted.

The same people that would prefer if you give all permissions. I still see no reason why Google doesn't implement more granular permissions models. Has the latest Android given you the ability to restrict an apps permissions after install without resorting to trusting 3rd party tools like xPrivacy or uninstalling the app?

> The same people that would prefer if you give all permissions. I still see no reason why Google doesn't implement more granular permissions models. In fact they have gone the other way with "permission groups" > Has the latest Android given you the ability to restrict an apps permissions after install without resorting to trusting 3rd party tools like xPrivacy or uninstalling the app? The hidden "AppOps" (post-inst…

> In fact they have gone the other way with "permission groups"

It's interesting that they went forward and then back on this. Ages ago the permission "read contacts and call log" was split up into two separate permissions. These days the Play Store displays either permission the same way - something like "read contacts or call log".

Re: Android: I don't need your permission

#136

Earlier quoted context omitted.

This. This is why I am moving to iOS. I installed Pocket. It wanted permission Contacts and Calendar. Contacts, I understand for sharing purposes. Calendar? Yeah, fuck off. Maybe they are bundled together like "read phone status and identity" and Pocket has no way around it. Maybe it is not. As a user, I should not have to worry about that. Contact and Calendar in no way should be bundled together.

Maybe they are bundled together like "read phone status and identity" and Pocket has no way around it. They aren't.

They are

Re: Android: I don't need your permission

#137

Earlier quoted context omitted.

This simply doesn't work for pausing audio when the phone rings. The ringer doesn't request audio focus.

The ringer doesn't request audio focus. I would think that this is a bug in the ringer and not an overall limitation of the Android permission system.

Which doesn't really help the users stuck on Android versions that never get any update or bugfixes. In which case apps have to take the pragmatic route and just work around the issue. Even if that requires a scary permission.

No user would point to Google and say »VLC doesn't pause when the phone rings, fix the ringer, please.«. Rather they point to VLC and say »VLC doesn't pause when the phone rings, fix VLC please.«

Re: Android: I don't need your permission

#138

Earlier quoted context omitted.

Maybe they are bundled together like "read phone status and identity" and Pocket has no way around it. They aren't.

They are

No, they aren't. READ_CALENDAR is a separate permission from READ_CONTACTS.

Re: Android: I don't need your permission

#139
post #83

There are two additions to the permissions API that I think would be very helpful: 1) Incremental Authorization - let Android apps ask for permissions only as they need them. So if you never use the phone dialing feature, they never ask for the permission. 2) One-time auth - allow an Android app to do something once. Say, scan your contacts one time. This gives you a little more control, so you know the dev isn't mon…

iOS has taken option 1 since the beginning and it works.

I can install Instagram and deny it access to the camera. It still works, it doesn't crap out on me. I don't need to install 3rd party rooted tools to provide fake camera for it.

Re: Android: I don't need your permission

#140
post #119

> Case in point: android.permission.CALL_PHONE. You need it to initiate phone calls from your app, right? This kind of thing is why I can't see myself switching to Android as my primary mobile OS any time soon. If anything, I can see a bright future for Microsoft. In spite of the fact Windows Phone exists, Android is very much the Windows of the mobile ecosystem. Permissions on Android are horrendous for developers.…

> If anything, I can see a bright future for Microsoft. I have both Android and Windows Phones. The Windows Phone is actually quite good and from developer point of view, a pleasure compared with Android tooling and APIs. Just the way Microsoft behaved with the customers has made many look elsewhere.

Could you explain what you're referring to in the last sentence please?

(An example of how the Windows phone permissions and intents systems work in practice would be nice too)

Post reply on HN