151–160 of 174 posts
Right, on a device with a closed source baseband. On a platform where the vendor has shown to install new apps without getting active consent from the user (Google Play Games, Hangouts, Google Now, Play Kiosk) to name a few.
Earlier quoted context omitted.
More "sandboxed" in the sense that iOS apps start in a small sandbox that gets progressively and opportunistically larger. Instead of demanding all permissions upon installation, they demand them contemporaneously with attempted access to certain resources. The idea is that user consent is more informed. In contrast, Android apps demand all of their permissions up front.
More importantly, if you ask me: iOS allows you to install an app, and deny it permission to something. Eg. I can deny the Facebook app access to my contact list, and the app still works. With Android, you grant an app access to everything it asks for, or you aren't allowed to install it. This seems obviously inferior to me.
"Secure business apps" Right, on a device with a closed source baseband. On a platform where the vendor has shown to install new apps without getting active consent from the user (Google Play Games, Hangouts, Google Now, Play Kiosk) to name a few.
I love the name "Google Play for Work."
My vote for most awkwardly named software project goes to : https://github.com/cocaine
A smiling furry with a turtle neck representing a project named latex.
Earlier quoted context omitted.
CyanogenMod's Privacy Guard is useful for dealing with this situation. There is a setting to enable it by default on newly installed apps. No matter what permissions the app says it requires, you are prompted when it actually requests them and can deny them at will or permanently.
Why do I need a custom ROM for privacy? This is so wrong. Great that you can partially fix this but what about the millions of other users who also want to control their privacy without reflashing a complete ROM.
> a dedicated work profile that isolates and protects work data Oh wow, can this be used to just create a separate profile for every app? That way I can run Uber or Line without giving them every permission to everything? This is the biggest reason I do not install apps. Every "famous" app requests so many permissions it's just stupid. And not to mention the weirdness of some of them, like "WiFi Device Information".…
Four years of android user. Just switch to iphone6 2 month ago. Almost every app requests too many permissions. Almost every app starts a background process to receive notifications. which are very bad.
Notifications are globally handled by the OS over a single dedicated optimized connection. And then dispatched to the individual applications.
Earlier quoted context omitted.
Why do I need a custom ROM for privacy? This is so wrong. Great that you can partially fix this but what about the millions of other users who also want to control their privacy without reflashing a complete ROM.
CyanogenMod comes preinstalled on OnePlus One, so for me it is no longer a "custom ROM". Even though it is not rooted by default, Privacy Guard has been working for me out of the box from day one.
Earlier quoted context omitted.
Encryption keys can be hidden in a way that is next to impossible to decipher. Superfish level of insecurity doesn't have to be the norm. The downside is that there are no open source libraries that make this possible which is why few people know about it.
That's obfuscation, which is just an arms race; it's not security in any measurable sense. It's fundamentally equivalent to the DRM problem. And there are no open-source libraries and not a lot of public documentation about how to defeat this sort of thing, so very few people who engage in this work have a good understanding of exactly how robust it is (and, anecdotally, most people tend to overestimate their product…
Or better yet, if you have full blown root, what's preventing you from just kinda LD_PRELOAD some code for that process and steal the decrypted data before it gets to the legitimate application? Or take a screenshot.
So I think the point is that Google probably will not allow this to be ran on any ROM that's not signed by some key.
Earlier quoted context omitted.
I think it can return valid data, like empty sets or fake data. So apps shouldn't crash at all.
Code that assumes it is going to get data instead of allowing for an empty response (in a circumstance where this is technically possible in reality but so rare the developer didn't thing to allow/test for it) could cause misfunction.
While I'm not exactly certain on how Privacy Guard works (I have yet to examine that code base), if a phone returns [] for a list of contacts and the application crashes...