4 ms·

Two other issues I'm worried about with iOS: - MAC address tracking (RTS packets thrwart MAC randomization[0], not immediately clear if WiFi is fully off[1])

Two other issues I'm worried about with iOS: - MAC address tracking (RTS packets thrwart MAC randomization[0], not immediately clear if WiFi is fully off[1]) - All-or-nothing access to photos on the phone (append-only for apps that request it) Discord in particular is bad for the photo permission, as I don't trust China's Tencent with access to all the photos on my phone (which can include lots of frequent location information!), but pasting images doesn't work in the app. I had assumed the "Photos" permission meant "permission to prompt this dialogue" and "permission to save to Camera Roll". [0] https://arxiv.org/pdf/1703.02874v1.pdf https://arxiv.org/pdf/1703.02874v1.pdf [1] https://support.apple.com/en-us/HT208086 https://support.apple.com/en-us/HT208086

saagarjha 9y ago
Does Tencent not have an extension that pops up in the sharing sheet for images?
- thisacctforreal 9y ago
  Just checked again: not for Discord. No idea about other apps owned by Tencent. It's notable Discord was developed as an American startup, and it's not clear what Tencent's involvement is. Regardless, for me it's too much access for a chat app to have in exchange for the convenince of sharing a photo from my phone.
  - zionic 9y ago
    A better solution would be for Apple to provide a decent photo picker that functions at the system level, and require a separate (special) permission to access all photos with the appropriate warning if that app needs a fancy dancy photo picker. Why do I need to give snapchat access to all photos ever just to post from my camera roll?
    - thisacctforreal 9y ago
      For the longest time that was how I thought it worked :/
    - jacobwil 9y ago
      It already does work like this in iOS 11. Apps can present the System photo picker to you and receive only your selected photo while having their Photos access set to "Never". If you want to try it out install the Wire messenger (if you make the account with a web browser you don't need to provide a phone number), and try to attach a photo but deny Photo library permissions. (Here's the buttons to press: https://imgur.com/a/gc5Iq https://imgur.com/a/gc5Iq). Other apps work this way on iOS 11 but this is the one that came to mind.
IMcD23 9y ago
In iOS 11, there is a new permission that an app can ask for, which grants write-only access to the photo library. [0] "To protect user privacy, an iOS app linked on or after iOS 10.0, and that accesses the user’s photo library, must statically declare the intent to do so." [0] https://developer.apple.com/library/content/documentation/General/Reference/InfoPlistKeyReference/Articles/CocoaKeys.html#//apple_ref/doc/uid/TP40009251-SW73 https://developer.apple.com/library/content/documentation/Ge...
conradev 9y ago
Apple changed the WiFi in Control Center behavior in iOS 11.2 to be more clear: https://www.macrumors.com/2017/11/13/ios-11-2-beta-3-control-center-explanations/ https://www.macrumors.com/2017/11/13/ios-11-2-beta-3-control...
9935c101ab17a66 9y ago
That's actually a very good point about the frequent location information (or just location metadata in general). I've never thought about it, but I guess giving an app access to my photos gives them full access to the location metadata, and would allow them to put together a pretty accurate model of where I've been and where I live.

saagarjha 9y ago

Does Tencent not have an extension that pops up in the sharing sheet for images?

thisacctforreal 9y ago
Just checked again: not for Discord. No idea about other apps owned by Tencent. It's notable Discord was developed as an American startup, and it's not clear what Tencent's involvement is. Regardless, for me it's too much access for a chat app to have in exchange for the convenince of sharing a photo from my phone.
- zionic 9y ago
  A better solution would be for Apple to provide a decent photo picker that functions at the system level, and require a separate (special) permission to access all photos with the appropriate warning if that app needs a fancy dancy photo picker. Why do I need to give snapchat access to all photos ever just to post from my camera roll?
  - thisacctforreal 9y ago
    For the longest time that was how I thought it worked :/
  - jacobwil 9y ago
    It already does work like this in iOS 11. Apps can present the System photo picker to you and receive only your selected photo while having their Photos access set to "Never". If you want to try it out install the Wire messenger (if you make the account with a web browser you don't need to provide a phone number), and try to attach a photo but deny Photo library permissions. (Here's the buttons to press: https://imgur.com/a/gc5Iq https://imgur.com/a/gc5Iq). Other apps work this way on iOS 11 but this is the one that came to mind.

IMcD23 9y ago

In iOS 11, there is a new permission that an app can ask for, which grants write-only access to the photo library. [0] "To protect user privacy, an iOS app linked on or after iOS 10.0, and that accesses the user’s photo library, must statically declare the intent to do so." [0] https://developer.apple.com/library/content/documentation/General/Reference/InfoPlistKeyReference/Articles/CocoaKeys.html#//apple_ref/doc/uid/TP40009251-SW73 https://developer.apple.com/library/content/documentation/Ge...

conradev 9y ago

Apple changed the WiFi in Control Center behavior in iOS 11.2 to be more clear: https://www.macrumors.com/2017/11/13/ios-11-2-beta-3-control-center-explanations/ https://www.macrumors.com/2017/11/13/ios-11-2-beta-3-control...

9935c101ab17a66 9y ago

That's actually a very good point about the frequent location information (or just location metadata in general). I've never thought about it, but I guess giving an app access to my photos gives them full access to the location metadata, and would allow them to put together a pretty accurate model of where I've been and where I live.