Live data from Hacker News

Google to ban financial lending apps from accessing user photos, contacts

pcmag.com

61–70 of 165 posts

Re: Google to ban financial lending apps from accessing user photos, contacts

#61
There’s currently a lot of pressure for Apple to allow alternative app stores or sideloading.

That means more choice, but can also weaken the protections for users. Alternative stores will likely have more loose policies for what apps/behavior they accept.

Re: Google to ban financial lending apps from accessing user photos, contacts

#62
post #50

This feels like treating one particularly visible symptom of the problem instead of fixing the actual problem. What Google should do instead is prevent apps from refusing to work or disabling unrelated functionality just because some permissions are denied (e.g., if you deny your banking app permission to access your camera, everything but mobile check deposit should still have to work). They should use a two-pronged…

Additionally there should be a sandbox mode. While you give the app access to Photos and Contacts, it's an actual sandbox not containing any photo nor any contact. So the app gets what it asks for (the permission) while the user can still control the data.

This is how photos access on iOS works. An app can ask for access to photos and you can choose 3 options:

- no photos - only specific photos (the system picker will appear to select them) - all photos

Re: Google to ban financial lending apps from accessing user photos, contacts

#63

This feels like treating one particularly visible symptom of the problem instead of fixing the actual problem. What Google should do instead is prevent apps from refusing to work or disabling unrelated functionality just because some permissions are denied (e.g., if you deny your banking app permission to access your camera, everything but mobile check deposit should still have to work). They should use a two-pronged…

>2. Make Android present convincing fake data to apps when permissions are denied GrapheneOS can do this. I believe you can even choose to make only chosen photos visible to a certain app

This functionality is built into iOS as well.

Re: Google to ban financial lending apps from accessing user photos, contacts

#64
post #2

I am so sad that I live in the society which is needed in such regulations. This change sounds like something good, but ability of vendor to do all kinds of things with a device makes me a smartphoneless person.

Almost all regulations are written as a result of some entities' abuse. That's why it's always so baffling to me how libertarians exist. Like the entire world view requires the holder to not understand history.

Re: Google to ban financial lending apps from accessing user photos, contacts

#65

I think the OS should provide the ability to select items and then give opaque handles to applications. The app could send a message to the OS to display photo selector. The OS could send a message back with a handle to selected photo. One could then asks the OS to send a handle, which would forward selected item somewhere else.

Both mainstream mobile operating systems have APIs for this. Even Linux has this at this point! Android has been restricting apps for at least a decade now, every time under heavy user protest because some weird app doesn't work anymore with the restrictions enabled.

The backwards compatibility of Android is a problem in this regard, because apps targeting old versions of Android get old, often less private, behaviour from the system to keep them working. Google has been forcing developers to upgrade their targeted version for a while now, though, so any app that still receives updates should be forced to use the modern API.

In the end, there will always be apps that need full media access. File managers, galleries image collage tools, you name it, you can't completely disable the generic file API. All other apps can use more appropriate APIs and often do, but those that hoover up data have little incentive to use the modern, privacy friendly versions. They're dragging every well-meaning app down with them through their terrible business practices.

I fully blame the advertiser laden crapware for the fact I can't sync my phone's clipboard in the background through KDE Connect anymore. The fact Google restricted the APIs instead of kicking the borderline malware out of their store irks me to no end and the fact Apple has placed similar restrictions onto their platform tells me it's not just Android.

Re: Google to ban financial lending apps from accessing user photos, contacts

#67
post #50

This feels like treating one particularly visible symptom of the problem instead of fixing the actual problem. What Google should do instead is prevent apps from refusing to work or disabling unrelated functionality just because some permissions are denied (e.g., if you deny your banking app permission to access your camera, everything but mobile check deposit should still have to work). They should use a two-pronged…

Additionally there should be a sandbox mode. While you give the app access to Photos and Contacts, it's an actual sandbox not containing any photo nor any contact. So the app gets what it asks for (the permission) while the user can still control the data.

LineageOS used to patch this on top of android afew years ago, not sure if its still there.

Re: Google to ban financial lending apps from accessing user photos, contacts

#68
post #56

Earlier quoted context omitted.

These apps are literally just friendlier payday lenders. They will also go under soon because the unfriendliness of payday lenders is essential to the business model and it doesn't scale well. Dave's delinquencies are probably atrocious

Why would the unfriendlessness of payday lenders be essential to the business model?

Because the type of people who have no choice but to resort to payday lenders are the same type of people who need men with guns to visit their in their house at 2 am in order to pay back their debts.

Re: Google to ban financial lending apps from accessing user photos, contacts

#69

Very few apps should have full contacts access. There should be a way to share a contact at a time with an app, like if I want to send an email payment through my banking app, it should call an android function to open a contact selector so I can share just that one contact. Or really, just the email address of that contact, not the rest of the data I may have associated with it.

Could be also manually allowing only selected CardDAV fields (e.g. only FN and mobile phone) across the address book.
Post reply on HN