Android's Permission Problems
#2
Posted 16 March 2012 - 05:27 PM
This statement is false as there have been major security breaches with iOS apps recently. Android offers concerned users far more information, and Google does scan the Play Store for malware.
#3
Posted 16 March 2012 - 06:20 PM
Android on the otherhand gives you freedom and choice for you to decide. It comes with the territory.
#4
Posted 16 March 2012 - 06:31 PM
NishantJunankar, on 16 March 2012 - 05:27 PM, said:
This statement is false as there have been major security breaches with iOS apps recently. Android offers concerned users far more information, and Google does scan the Play Store for malware.
Exactly. It's this kind of "burying the head in the sand" that has resulted in tons of iPhone and iPad users to be deeply infected with malware and spyware without ever realizing it.
The same problem has existed on Macs, where users convince themselves that malware isn't possible on a Mac.
#5
Posted 16 March 2012 - 06:48 PM
BIGELLOWagui, on 16 March 2012 - 06:31 PM, said:
NishantJunankar, on 16 March 2012 - 05:27 PM, said:
This statement is false as there have been major security breaches with iOS apps recently. Android offers concerned users far more information, and Google does scan the Play Store for malware.
Exactly. It's this kind of "burying the head in the sand" that has resulted in tons of iPhone and iPad users to be deeply infected with malware and spyware without ever realizing it.
The same problem has existed on Macs, where users convince themselves that malware isn't possible on a Mac.
I thought I'd quickly address this... We know about apps like Path and others that have been caught with their proverbial hand in the stretched-metaphor personal data cookie jar, but we were speaking in broad terms here. We also touched on the potential for iOS spyware/malware in this story from last summer:
http://www.pcworld.c...lity_check.html
--Nick
resident security guy
#6
Posted 16 March 2012 - 07:15 PM
#7
Posted 16 March 2012 - 07:24 PM
JuanRiossk7s, on 16 March 2012 - 07:15 PM, said:
There's another issue at play here, too: alert fatigue. When you're inundated with pop-up alerts, those alerts can lose their importance--think the cancel/allow alerts in Windows Vista that drove many users batty. It's a fine line to walk.
#8
Posted 16 March 2012 - 07:28 PM
#9
Posted 16 March 2012 - 07:35 PM
This article has nothing to do with iOS. It's about how the permissions system that Android employs has its flaws and probably isn't the best solution. Do I want a locked out environment for Android like there is in iOS? No, because that goes against what Android was built upon.
So let's focus on the issue at hand here: Android permissions need to be done away with and developers need to be more transparent about what data they use.
#10
Posted 16 March 2012 - 07:57 PM
ArmandoRodriguez, on 16 March 2012 - 07:35 PM, said:
This article has nothing to do with iOS. It's about how the permissions system that Android employs has its flaws and probably isn't the best solution. Do I want a locked out environment for Android like there is in iOS? No, because that goes against what Android was built upon.
So let's focus on the issue at hand here: Android permissions need to be done away with and developers need to be more transparent about what data they use.
pretty sure amazon's kindle app is "safe" and yet it has some permissions yousay are a red flag
#11
Posted 16 March 2012 - 08:48 PM
DTNick, on 16 March 2012 - 07:24 PM, said:
JuanRiossk7s, on 16 March 2012 - 07:15 PM, said:
There's another issue at play here, too: alert fatigue. When you're inundated with pop-up alerts, those alerts can lose their importance--think the cancel/allow alerts in Windows Vista that drove many users batty. It's a fine line to walk.
Just like red lights and stop signs. They can become annoying until you have an accident. I love the Windows Vista/7 dialogs that let me know when something that could cause problems on my machine is about to happen. Never understood the complaints about, how many such operations you need to perform on a daily basis? Stop watching ..... and downloading programs from .......
#12
Posted 16 March 2012 - 09:02 PM
#13
Posted 16 March 2012 - 09:11 PM
Google does have a Bouncer program to guard against malicious apps in the Google Play (Android Market.)
However, Google should have some way of minimising App permissions based on their functionality.
#14
Posted 16 March 2012 - 09:35 PM
To wit: Accuweather's latest update has triggered a rash of comments and low ratings regarding permissions to access one's calendar and make phone calls, etc.
I haven't updated either.
When an update requires new permissions, you have to manually update the app, even if you have checked off on automatic updates.
That seems to be a fairly clear policy, and the permissions list is not difficult to navigate and understand.
#15
Posted 16 March 2012 - 09:54 PM
JuanRiossk7s, on 16 March 2012 - 08:48 PM, said:
DTNick, on 16 March 2012 - 07:24 PM, said:
JuanRiossk7s, on 16 March 2012 - 07:15 PM, said:
There's another issue at play here, too: alert fatigue. When you're inundated with pop-up alerts, those alerts can lose their importance--think the cancel/allow alerts in Windows Vista that drove many users batty. It's a fine line to walk.
Just like red lights and stop signs. They can become annoying until you have an accident. I love the Windows Vista/7 dialogs that let me know when something that could cause problems on my machine is about to happen. Never understood the complaints about, how many such operations you need to perform on a daily basis? Stop watching ..... and downloading programs from .......
I think there's a difference between a stop sign or speed limit sign and an pop-up asking you to confirm that you want an app to access certain bits of information. A stop sign is a directive; a confirmation box isn't.
And I think any traffic engineer will tell you that the placement and number of road signs matters, too:
http://www.trafficsi...ut.html#purpose
#16
Posted 16 March 2012 - 10:52 PM
I do agree with the author that the permission the developer sets in the Manifest should require a description tag, which is then displayed on the market.
I guess the GUI could also be improved to make the permission the app request annoying in your face before you install.
#17
Posted 16 March 2012 - 11:11 PM
All PC apps have full control of every resource the user does - including all of their files, their databases, their mounted fileshares, their contacts. And naturally the apps can upload all of that data to the internet too.
That's how programs work. They do things. Anything one program can do, another program can do.
#18
Posted 16 March 2012 - 11:13 PM
NishantJunankar, on 16 March 2012 - 05:27 PM, said:
This statement is false as there have been major security breaches with iOS apps recently. Android offers concerned users far more information, and Google does scan the Play Store for malware.
But that is no defense for Android's shortcomings. And besides, Apple is very quick to fix those problems and pushes out security updates across all of their devices within a matter of days. Android, being unimaginably fragmented in both hardware and software, cannot. Thus, old security issues can linger, literally, for years. No OS is 100% secure but Android is far, far worse off because of the fragmented nature of the platform.
#19
Posted 17 March 2012 - 01:30 AM
This story only highlights peoples laziness and over reliance on closed source dodgy software, two things that are encouraged by your beloved iOS and Microsoft.
Android store is like the internet, some sites you juts know to avoid!
#20
Posted 17 March 2012 - 04:56 AM
Help













