Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

We can't check the app permissions on Google Play anymore

bluespace.tech

Post reply on HN
Print view View original

91–100 of 121 posts

Re: We can't check the app permissions on Google Play anymore

#91

Post by EwanToo »

geokon wrote: post #89
RjQoLCOSwiIKfpm wrote: post #42

Earlier quoted context omitted.

> Some users would never even install apps that asked for too many static permissions on the Play page. This, so much! Like 90% of the apps on Play ask for an insanely excessive amount of permissions. It was the #1 indicator for sorting out garbage apps. Example: Some time ago I needed a kitchen timer app (stock one had some issue). The great majority of them wanted permissions like contacts, access to my files, GPS…

“and on top of it internet” is internet a permission? I've never seen that in any menu or prompt. I don't think Android has this. Which is a shame bc i mostly use offline apps and would love to know if an app is all offline Understandably, I don't think Google cares about the offline use of their OS. It doesn't align with their business interests

The app needs to request it in the manifest file, but it's automatically granted if the app does request it - you don't get a prompt.

Re: We can't check the app permissions on Google Play anymore

#92

Post by aasasd »

MrThoughtful wrote: post #72
tadfisher wrote: post #63

Earlier quoted context omitted.

This is being clamped down on, at least for apps on the Play Store. How it works now is the app has unfettered access to its own internal and external storage directory, and can prompt the user to select another one to give access for saving additional data. There are some rough edges for implementors, though; for example, getting your content to show up in media player apps requires usage of a completely separate AP…

Where is this "own external storage directory"? The behavior you describe is not what I experience in real life. I see apps being able to read and write from all directories on my SD card.

Either you have Android <10, or you have an unofficial ROM, or the manufacturer decided to do weird things to the system for some reason.

Re: We can't check the app permissions on Google Play anymore

#93

Post by dmitriid »

MrThoughtful wrote: post #33

What I always found very confusing is that apps on Android can either read all of the SD drive or nothing. Wouldn't the normal approach to gate applications from each other be to give each one the right to access a single directory? The way it is, all apps want to "READ_EXTERNAL_STORAGE" so they all can read all the data I save.

Funnily enough, that's exactly what Apple started with on iOS: each app only has access to its own sandbox. And it was derided by Android fans for being too restricted.

Re: We can't check the app permissions on Google Play anymore

#94

Post by hulitu »

MrThoughtful wrote: post #33

What I always found very confusing is that apps on Android can either read all of the SD drive or nothing. Wouldn't the normal approach to gate applications from each other be to give each one the right to access a single directory? The way it is, all apps want to "READ_EXTERNAL_STORAGE" so they all can read all the data I save.

This is the new "security". Phone needs access to camera and storage although it cannot make video calls or record a conversation. Messages needs access to camera and microphone. Play Store needs access to everything. All the time. Working some jobs at Google, Microsoft, Facebook and Apple must be a pedophile's heaven.

Re: We can't check the app permissions on Google Play anymore

#95

Post by beninsydney »

Gigachad wrote: post #77
beninsydney wrote: post #30

Earlier quoted context omitted.

The permissions list allowed you to make a better-informed decision before you download the app, even though you can't change what permissions an app requires you could shop around for apps without specific permissions. This was never incompatible with ad-hoc approving or rejecting permissions either.

This only works for utility apps which are really the minority of apps that users install. There is only one app to access my bank account, there is only one app to stream netflix on, there is only one app to access government services on. Outside of flashlight and QR scanner apps, there is basically nothing the user can action aside from completely rejecting the wider service over some ambiguity in the permissions l…

Aside from utilities many games have lots of similar competing products where you can differentiate on permissions/ads/in-app purchases/etc: crossword puzzles, sudokus, games for younger kids like dress up or coloring in stuff.

Re: We can't check the app permissions on Google Play anymore

#97

Post by hulitu »

paradite wrote: post #4

I publish both Android and iOS apps regularly, this is just Google getting to feature parity with Apple. Apple had data safety, Google now has it. Apple didn't show permissions, now Google also doesn't. Presumably most people don't really care about permissions anymore.

> Apple had data safety, Google now has it.

My data and Google's safety. Why does my phone needs access to storage ?

Re: We can't check the app permissions on Google Play anymore

#98

Post by tgsovlerkhgsel »

MrThoughtful wrote: post #33

What I always found very confusing is that apps on Android can either read all of the SD drive or nothing. Wouldn't the normal approach to gate applications from each other be to give each one the right to access a single directory? The way it is, all apps want to "READ_EXTERNAL_STORAGE" so they all can read all the data I save.

Apps haven't needed this permission for most use cases for 5+ years now... only now is the ability to request it being taken away from the last ones (unless they have an exception based on a legit use case like file managers)

Re: We can't check the app permissions on Google Play anymore

#99

Post by Gigachad »

happymellon wrote: post #90
Gigachad wrote: post #25

Earlier quoted context omitted.

The permissions list on the play store was completely useless from a privacy standpoint. Even power users could to just about nothing with the info. The situation now where you approve or reject permissions as they are used in the app is vastly better than the original android model of being shown a wall of text with the options to either give away all of your data and security or not install the app.

I remember the situation where Google used to bundle permissions in illogical ways. it's been too long to remember specifics but it essentially meant an app had to request the ability to access unnecessary things and required the dev to explain in the release notes as to why.

Usually they weren't illogical but they were hard to understand for the user. Bluetooth scanning for example requires the location permission for example, which seems illogical until you find out that advertisers worked out they could put bluetooth beacons all over the place and track the users location by checking which beacons are in range.

So apps have to request all these scary permissions so they can do regular things. But there is really no alternative.

Re: We can't check the app permissions on Google Play anymore

#100

Post by fauigerzigerk »

dheera wrote: post #47
lovelearning wrote: post #28

The dynamic permissions are not a replacement. Some users would never even install apps that asked for too many static permissions on the Play page. But now, if an app seems to meet their needs and they aren't sure, some of them will go ahead and install it just to try it out. How much can one run hurt after all? Due to unresolved questions or sunk cost dilemmas, they may even grant dynamic permissions. How much can…

What they really need to do is to simulate data for permissions that are rejected. For example, if I reject location permissions, then play back a random GPS trail in a randomly selected city on the planet, complete with simulated error and drift. If I reject Wi-Fi scanning, then show a constantly changing set of fake access points. If I reject camera, then play back some cartoons or deepfaked video as a camera devic…

This would be a nice option to have, but it's only useful for a small number of tech affine people who know what they're doing. If the location doesn't agree with the IP address, the app would know it's not real. And if this is used with banks or payment services people are going to get their accounts disabled.

In general, I'm not sure spreading random fake news about yourself is such a great idea unless everybody does it. And everybody doesn't do it, because if everybody cared so much about these things the problem wouldn't exist in the first place.

Post reply on HN