PCWorld Forums

PCWorld Forums: Android's Permission Problems - PCWorld Forums

Jump to content

  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic

Android's Permission Problems

#1 User is offline   PCWorld 

  • Advanced Member
  • PipPipPipPipPipPipPipPip
  • Group: PCWorld BOT
  • Posts: 103,731
  • Joined: 01-August 07

Posted 16 March 2012 - 05:01 PM

Post your comments for Android's Permission Problems here
0

#2 User is offline   NishantJunankar 

  • Newbie
  • Pip
  • Group: New Member
  • Posts: 1
  • Joined: 16-March 12

  Posted 16 March 2012 - 05:27 PM

"While iOS users can generally depend on Apple's app-curating process to keep their data safe"
This statement is false as there have been major security breaches with iOS apps recently. Android offers concerned users far more information, and Google does scan the Play Store for malware.
0

#3 User is offline   NomeSaili 

  • Newbie
  • Pip
  • Group: New Member
  • Posts: 3
  • Joined: 13-March 12

  Posted 16 March 2012 - 06:20 PM

Well even if that's true. Apple hold their customers hand and pocket :) so i am not surprise.

Android on the otherhand gives you freedom and choice for you to decide. It comes with the territory.
0

#4 User is offline   BIGELLOWagui 

  • Member
  • PipPip
  • Group: Members
  • Posts: 33
  • Joined: 19-April 11

Posted 16 March 2012 - 06:31 PM

View PostNishantJunankar, on 16 March 2012 - 05:27 PM, said:

"While iOS users can generally depend on Apple's app-curating process to keep their data safe"
This statement is false as there have been major security breaches with iOS apps recently. Android offers concerned users far more information, and Google does scan the Play Store for malware.



Exactly. It's this kind of "burying the head in the sand" that has resulted in tons of iPhone and iPad users to be deeply infected with malware and spyware without ever realizing it.

The same problem has existed on Macs, where users convince themselves that malware isn't possible on a Mac.
0

#5 User is offline   DTNick 

  • Advanced Member
  • Group: PC World Editorial
  • Posts: 854
  • Joined: 15-October 07
  • Location:Right here, silly

Posted 16 March 2012 - 06:48 PM

View PostBIGELLOWagui, on 16 March 2012 - 06:31 PM, said:

View PostNishantJunankar, on 16 March 2012 - 05:27 PM, said:

"While iOS users can generally depend on Apple's app-curating process to keep their data safe"
This statement is false as there have been major security breaches with iOS apps recently. Android offers concerned users far more information, and Google does scan the Play Store for malware.

Exactly. It's this kind of "burying the head in the sand" that has resulted in tons of iPhone and iPad users to be deeply infected with malware and spyware without ever realizing it.

The same problem has existed on Macs, where users convince themselves that malware isn't possible on a Mac.

I thought I'd quickly address this... We know about apps like Path and others that have been caught with their proverbial hand in the stretched-metaphor personal data cookie jar, but we were speaking in broad terms here. We also touched on the potential for iOS spyware/malware in this story from last summer:

http://www.pcworld.c...lity_check.html

--Nick
resident security guy
0

#6 User is offline   JuanRiossk7s 

  • Member
  • PipPip
  • Group: New Member
  • Posts: 13
  • Joined: 01-June 11

  Posted 16 March 2012 - 07:15 PM

Stop smoking rubber. This is more of an iOS issue than Android. With Android you have to give permission to the app to this stuff with iOS Apple knows better is the word on the street. If the app maker makes a deal with Apple or if Apple see is a popular app that can make them some money say good bye to your personal data.
0

#7 User is offline   DTNick 

  • Advanced Member
  • Group: PC World Editorial
  • Posts: 854
  • Joined: 15-October 07
  • Location:Right here, silly

Posted 16 March 2012 - 07:24 PM

View PostJuanRiossk7s, on 16 March 2012 - 07:15 PM, said:

Stop smoking rubber. This is more of an iOS issue than Android. With Android you have to give permission to the app to this stuff with iOS Apple knows better is the word on the street. If the app maker makes a deal with Apple or if Apple see is a popular app that can make them some money say good bye to your personal data.

There's another issue at play here, too: alert fatigue. When you're inundated with pop-up alerts, those alerts can lose their importance--think the cancel/allow alerts in Windows Vista that drove many users batty. It's a fine line to walk.
0

#8 User is offline   DTNick 

  • Advanced Member
  • Group: PC World Editorial
  • Posts: 854
  • Joined: 15-October 07
  • Location:Right here, silly

  Posted 16 March 2012 - 07:28 PM

Also, keep in mind; this wasn't intended to be an Android vs. iOS security/privacy story. iOS privacy is a topic for an entirely different story.
0

#9 User is offline   ArmandoRodriguez 

  • Advanced Member
  • Group: PC World Editorial
  • Posts: 154
  • Joined: 06-August 10

  Posted 16 March 2012 - 07:35 PM

Author of the story here:

This article has nothing to do with iOS. It's about how the permissions system that Android employs has its flaws and probably isn't the best solution. Do I want a locked out environment for Android like there is in iOS? No, because that goes against what Android was built upon.

So let's focus on the issue at hand here: Android permissions need to be done away with and developers need to be more transparent about what data they use.
0

#10 User is offline   Christopher6fyw 

  • Newbie
  • Pip
  • Group: New Member
  • Posts: 1
  • Joined: 16-March 12

Posted 16 March 2012 - 07:57 PM

View PostArmandoRodriguez, on 16 March 2012 - 07:35 PM, said:

Author of the story here:

This article has nothing to do with iOS. It's about how the permissions system that Android employs has its flaws and probably isn't the best solution. Do I want a locked out environment for Android like there is in iOS? No, because that goes against what Android was built upon.

So let's focus on the issue at hand here: Android permissions need to be done away with and developers need to be more transparent about what data they use.

pretty sure amazon's kindle app is "safe" and yet it has some permissions yousay are a red flag
0

#11 User is offline   JuanRiossk7s 

  • Member
  • PipPip
  • Group: New Member
  • Posts: 13
  • Joined: 01-June 11

Posted 16 March 2012 - 08:48 PM

View PostDTNick, on 16 March 2012 - 07:24 PM, said:

View PostJuanRiossk7s, on 16 March 2012 - 07:15 PM, said:

Stop smoking rubber. This is more of an iOS issue than Android. With Android you have to give permission to the app to this stuff with iOS Apple knows better is the word on the street. If the app maker makes a deal with Apple or if Apple see is a popular app that can make them some money say good bye to your personal data.

There's another issue at play here, too: alert fatigue. When you're inundated with pop-up alerts, those alerts can lose their importance--think the cancel/allow alerts in Windows Vista that drove many users batty. It's a fine line to walk.

Just like red lights and stop signs. They can become annoying until you have an accident. I love the Windows Vista/7 dialogs that let me know when something that could cause problems on my machine is about to happen. Never understood the complaints about, how many such operations you need to perform on a daily basis? Stop watching ..... and downloading programs from .......
0

#12 User is offline   ozoneocean 

  • Member
  • PipPip
  • Group: Members
  • Posts: 46
  • Joined: 28-December 07

  Posted 16 March 2012 - 09:02 PM

The permissions are there, they're easy to understand and most users DO look at them. ios users often do not of the same luxury of knowing what their apps have access too which has been proven catastrophically in just the last couple of moths. Time and again the curated system has simply let things through and continues to do so, without this detailed permission system it's actually less secure.
0

#13 User is offline   mantrik00 

  • Newbie
  • Pip
  • Group: Members
  • Posts: 8
  • Joined: 08-November 09

  Posted 16 March 2012 - 09:11 PM

I have serious doubts about the ability of an app-curating committee to check for all possible security vulnerabilities of an App on the iOS platform. Apple's model may make people think they are safe because of the process. But that is only a false sense of security because they do not really know what possible harms their apps may do (in the absence of an installation notification system to indicate the various system processes the App may access.)

Google does have a Bouncer program to guard against malicious apps in the Google Play (Android Market.)

However, Google should have some way of minimising App permissions based on their functionality.
0

#14 User is offline   Grrreath3lg 

  • Member
  • PipPip
  • Group: Members
  • Posts: 33
  • Joined: 24-March 11

  Posted 16 March 2012 - 09:35 PM

I am quite certain that many people are paying attention to the permissions.

To wit: Accuweather's latest update has triggered a rash of comments and low ratings regarding permissions to access one's calendar and make phone calls, etc.

I haven't updated either.

When an update requires new permissions, you have to manually update the app, even if you have checked off on automatic updates.

That seems to be a fairly clear policy, and the permissions list is not difficult to navigate and understand.
0

#15 User is offline   DTNick 

  • Advanced Member
  • Group: PC World Editorial
  • Posts: 854
  • Joined: 15-October 07
  • Location:Right here, silly

Posted 16 March 2012 - 09:54 PM

View PostJuanRiossk7s, on 16 March 2012 - 08:48 PM, said:

View PostDTNick, on 16 March 2012 - 07:24 PM, said:

View PostJuanRiossk7s, on 16 March 2012 - 07:15 PM, said:

Stop smoking rubber. This is more of an iOS issue than Android. With Android you have to give permission to the app to this stuff with iOS Apple knows better is the word on the street. If the app maker makes a deal with Apple or if Apple see is a popular app that can make them some money say good bye to your personal data.

There's another issue at play here, too: alert fatigue. When you're inundated with pop-up alerts, those alerts can lose their importance--think the cancel/allow alerts in Windows Vista that drove many users batty. It's a fine line to walk.

Just like red lights and stop signs. They can become annoying until you have an accident. I love the Windows Vista/7 dialogs that let me know when something that could cause problems on my machine is about to happen. Never understood the complaints about, how many such operations you need to perform on a daily basis? Stop watching ..... and downloading programs from .......

I think there's a difference between a stop sign or speed limit sign and an pop-up asking you to confirm that you want an app to access certain bits of information. A stop sign is a directive; a confirmation box isn't.

And I think any traffic engineer will tell you that the placement and number of road signs matters, too:
http://www.trafficsi...ut.html#purpose
0

#16 User is offline   kronoscornelius 

  • Senior Member
  • PipPipPipPipPip
  • Group: Members
  • Posts: 528
  • Joined: 11-October 09

  Posted 16 March 2012 - 10:52 PM

How dare Google think their users are intelligent? Letting them make decisions as if they were adults !

I do agree with the author that the permission the developer sets in the Manifest should require a description tag, which is then displayed on the market.

I guess the GUI could also be improved to make the permission the app request annoying in your face before you install.
0

#17 User is offline   symbolset 

  • Full Member
  • PipPipPip
  • Group: Members
  • Posts: 71
  • Joined: 01-December 09

  Posted 16 March 2012 - 11:11 PM

"Some apps are constantly connected to the Internet, and can upload your personal data--such as your private photos or documents--to a remote server without your knowledge or consent."

All PC apps have full control of every resource the user does - including all of their files, their databases, their mounted fileshares, their contacts. And naturally the apps can upload all of that data to the internet too.

That's how programs work. They do things. Anything one program can do, another program can do.
0

#18 User is offline   AndreRichards2010 

  • Member
  • PipPip
  • Group: New Member
  • Posts: 19
  • Joined: 30-November 10

Posted 16 March 2012 - 11:13 PM

View PostNishantJunankar, on 16 March 2012 - 05:27 PM, said:

"While iOS users can generally depend on Apple's app-curating process to keep their data safe"
This statement is false as there have been major security breaches with iOS apps recently. Android offers concerned users far more information, and Google does scan the Play Store for malware.


But that is no defense for Android's shortcomings. And besides, Apple is very quick to fix those problems and pushes out security updates across all of their devices within a matter of days. Android, being unimaginably fragmented in both hardware and software, cannot. Thus, old security issues can linger, literally, for years. No OS is 100% secure but Android is far, far worse off because of the fragmented nature of the platform.
0

#19 User is offline   se4n 

  • Newbie
  • Pip
  • Group: New Member
  • Posts: 1
  • Joined: 17-March 12

  Posted 17 March 2012 - 01:30 AM

I refute there is a permission problem. It is not googles responsibility to look after the security of your phone, it is YOURS. Reading permissions is not hard and it plainly obvious what apps to use. Many of the best apps on android are open source so you can see for yourself why they use certain permissions.

This story only highlights peoples laziness and over reliance on closed source dodgy software, two things that are encouraged by your beloved iOS and Microsoft.

Android store is like the internet, some sites you juts know to avoid!
0

#20 User is offline   KLanD 

  • Expert
  • PipPipPipPipPipPip
  • Group: Members
  • Posts: 1,763
  • Joined: 06-March 08

  Posted 17 March 2012 - 04:56 AM

At least Android apps ask for permission, instead of just doing it without your consent like iOS apps.
0

Share this topic:


  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users