Live data from Hacker News

Everyone knows all the apps on your phone

peabee.substack.com

281–290 of 502 posts

Re: Everyone knows all the apps on your phone

#281
Exodus Privacy will let you know about this kind of Android apps you should avoid installing https://exodus-privacy.eu.org/

Swiggy is actually a small player in terms of permissions requested, with 'only' 47 Compare it to Weibo with 104, Wechat with 93, Facebook with 85, Snapchat with 71 (granted those apps may offer additional services that require some additional permissions, but they are definitely not worth giving them all your data...)

Re: Everyone knows all the apps on your phone

#282
post #280

"the one that blue tick twitter accounts living in certain pin codes of Bengaluru passionately discuss amongst themselves for a week every year" To someone embarrassingly unfamiliar with Indian culture, what does it mean?

Bengaluru/Bangalore has hotspots (PIN codes are postal address codes) where there are lots of startups, mostly in ecommerce, ad-tech, online education etc. and they have incentive to upsell you a lot. I guess its referring to someone wannabe influencer buying Twitter(X) premium and posting based on half baked info on customers. Mostly sarcasm, so take with a grain of salt. I can't tell about accuracy, but explaining…

Thanks, this is helpful. Is the certain week referring to a specific festival?

Re: Everyone knows all the apps on your phone

#283
post #281

Exodus Privacy will let you know about this kind of Android apps you should avoid installing https://exodus-privacy.eu.org/ Swiggy is actually a small player in terms of permissions requested, with 'only' 47 Compare it to Weibo with 104, Wechat with 93, Facebook with 85, Snapchat with 71 (granted those apps may offer additional services that require some additional permissions, but they are definitely not worth givin…

[deleted]

Re: Everyone knows all the apps on your phone

#284
The HSBC UK Android app look s at what apps you have, and refuses to run if you have apps with certain permissions (such as an alternative launcher) and now refuses to run if you have any apps from outside the Google app store.

I have complained about this here before, but the end result was that I asked for a hardware security device and use the website instead.

Re: Everyone knows all the apps on your phone

#285
post #90

The ACTION_MAIN loophole has been written about before: https://commonsware.com/blog/2020/04/05/android-r-package-vi... Google refuses to patch this. I wonder what would happen if you submit it to the Android VDP as a permission bypass. There’s also this SO question by the author about the bypass: https://stackoverflow.com/q/79527331

What do you mean with "refused to patch this"? Google will reject any app publishing attempt that asks for that filter and isn't a launcher on Play store.

The HSBC bank app uses this and is in the Play Store.

Re: Everyone knows all the apps on your phone

#286

I still, will never understand the need for native "Apps". To this day, I have never seen an "App" that couldn't simply have been a website/webapp. Most of them would likely be improved by being a webapp. The only benefits I can see of "Apps", are the developer get's access to private information they really don't need. Yeah, they get to be on the "App Store". But the "App Store" is a totally unnecessary concept intr…

Maps and navigation apps? Desktop integration and sync apps?

That said most of the time you are right.

I am fairly convinced that some apps are just wrappers around web apps. The Virgin Money (Uk bank brand) app used to ask for cookie permissions on launch and felt very like their website used to (until it was removed and they went app only).

Re: Everyone knows all the apps on your phone

#287

The HSBC UK Android app look s at what apps you have, and refuses to run if you have apps with certain permissions (such as an alternative launcher) and now refuses to run if you have any apps from outside the Google app store. I have complained about this here before, but the end result was that I asked for a hardware security device and use the website instead.

That's beyond absurd. Sounds par for the course with HSBC!

Re: Everyone knows all the apps on your phone

#288
post #45

It requires root, but you can block/spoof this with an LSPosed[1] module such as XPrivacyLua[2]. I hear there's also the closed-source AppOps[3], but I've never used it. [1]: https://lsposed.org [2]: https://github.com/M66B/XPrivacyLua / https://github.com/0bbedCode/XPL-EX [3]: https://appops.rikka.app

I've not heard of XPrivacyLua, which is by the same author of the excellent NetGuard[0], which I've been using for years. Interestingly XPrivacyLua is not supported anymore and the pro companion app will be removed from the Play store by Google because it uses the permission QUERY_ALL_PACKAGES.[1] [0]: https://github.com/M66B/NetGuard [1]: https://xdaforums.com/t/closed-app-xposed-6-0-xprivacylua-an...

Indeed, it is a shame. However, XPL-EX is a fork (though with much internal code (re)written at this point) with even more capability, while maintaining the familiar and simple UI. Seems pretty neat!

Re: Everyone knows all the apps on your phone

#290

Earlier quoted context omitted.

The US Customs & Border Control apps ("CBP Home" and "Mobile Passport Control") could check for blacklisted apps and flag you to be deported to an El Salvadorean gulag without due process.

Does El Salvador do gulags? I thought that was more of a Russian approach to imprisonment.

Parent commenter doesn't mean literal gulags, but a similarly bad place sent people to by a similarly bad government.
Post reply on HN