Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Majority of U.S. consumers still download zero apps per month, says comScore

techcrunch.com

Post reply on HN
Print view View original

41–42 of 42 posts

Re: Majority of U.S. consumers still download zero apps per month, says comScore

#41

Post by blorsh »

ahartmetz wrote: post #22
kahnpro wrote: post #20

Earlier quoted context omitted.

Pretty sure that's how most app conception begins. How can they gather as much user data as possible, or as many videos micropayments as possible. I think that most apps only exist so that some company can get a tracking device onto your phone.

Permission systems are fairly good in both Android and iOS now, though. Note: I agree that protecting your data is important, I don't want to downplay that.

No, the situation is "take it or leave it". Give all the permissions, or don't get to use the app. There are now even web sites (facebook, google maps, yahoo email) that seem to refuse service if you are determined to be on a phone. They demand that you install their app instead.

Proper permissions would have 4 possible settings:

1. ask (the default), with checkbox to make the choice stick

2. deny

3. allow

4. deceive the app, pretending to allow.

That last one is important. It keeps apps from forcing users to allow absurd permissions. Deception plug-ins should be possible, allowing various kinds of deception (like "oh, sorry, there is no signal") and even man-in-the-middle against the apps.

Re: Majority of U.S. consumers still download zero apps per month, says comScore

#42

Post by mhils »

mayank wrote: post #40
us0r wrote: post #24

Earlier quoted context omitted.

This is exactly why I don't download apps. I proxied my phone one day and almost fell out of my chair. I'm shocked Google and Apple allow this to go on.

I was under the impression that mitmproxy is no longer effective with iOS's mandatory pinned certificates. How did you manage to intercept traffic?

iOS' App Transport Security is friendly to researchers that install their own CA.

Android Nougat is much worse in this regard: Apps disrespect any user-added CAs, which really doesn't contribute to Android's security level but makes checking what your apps send home a huge PITA.

Post reply on HN