Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Dont install the javelin browser – permissions abuse

news.ycombinator.com

Post reply on HN
Print view View original

1–10 of 15 posts

Dont install the javelin browser – permissions abuse

#1

Post by skynetv2 »

A few weeks ago, the developer of javelin browser, Steven Goh, posted on this site about the new browser he was developing.

https://news.ycombinator.com/item?id=8368199 nubela

I wanted to show support for his work, and installed the browser and tried it out.

Today I received an email from the developer on my WORK email promoting his IndieGoGo campaign.

The app discovered all the email addresses on my device (which includes my work email) and sent it back for later use.

And there is no unsubscribe option in the email.

first he steals my email address and uses it for marketing purposes without even asking me permission and then he doesnt even provide me with an option to unsubscribe.

This is why I am always hesitant to try new apps or apps that I feel are asking too many permissions. They abuse your trust.

Re: Dont install the javelin browser – permissions abuse

#5

Post by skynetv2 »

bhhaskin wrote: post #4

Reminded me of how LinkedIn would scan your contacts and invite them all...

i had couple of embarrassing situations like that, the latest one seems to be researchgate.

now i wonder if this javelin guy took my address book too sending emails to others saying I recommended it

Re: Dont install the javelin browser – permissions abuse

#8

Post by greenyoda »

"I wanted to show support for his work, and installed the browser and tried it out.

Today I received an email from the developer on my WORK email promoting his IndieGoGo campaign."

How can you be sure that this isn't a coincidence? Of course it's possible that the browser app could have stolen your contact information, but maybe they got your work address from another source a long time ago (which still doesn't make the spam acceptable). But just because one event precedes another doesn't imply that there's any causal relationship.[1]

[1] https://en.wikipedia.org/wiki/Post_hoc_ergo_propter_hoc

Re: Dont install the javelin browser – permissions abuse

#9

Post by skynetv2 »

greenyoda wrote: post #8

"I wanted to show support for his work, and installed the browser and tried it out. Today I received an email from the developer on my WORK email promoting his IndieGoGo campaign." How can you be sure that this isn't a coincidence? Of course it's possible that the browser app could have stolen your contact information, but maybe they got your work address from another source a long time ago (which still doesn't make…

ummm ... heres what the email says

"Hi, I am Steven Goh the developer of Javelin Browser and you are receiving this email because you have tried Javelin before."

I thinks its pretty clear why I got this email.

Re: Dont install the javelin browser – permissions abuse

#10

Post by angrycat »

Developer of javelin is definitely a scumbag, mining contact information off of users devices and sending emails to peoples work accounts without any warning advertising his "private" browser. The browser is actually based off of an open source android browser called Lightning which he never credited at all until people found out and started calling him out on it. With such shady practices I would not trust my privacy with that app.

Personally I have been using Frost https://play.google.com/store/apps/details?id=com.crowbar.be... as a private browser for the last 3 years and have been very happy with it.

Post reply on HN