9 ms·

I hate that I can't send a photo to a friend without giving facebook access to all of my photos. Where's the "just this one" option?

starik36 9y ago
That bugs me too. I've resorted to placing the photo on the clipboard, then paste it. A workaround, but well worth preserving your sanity.
- xvf22 9y ago
  Heh I don't bother with the app and suffer with the web interface. Annoyingly I now need to "Request Desktop Site" to use messenger or else it tries to get me to install the app. The artificial friction they're put in place has pushed me ever closer to just deleting my account.
  - prutschman 9y ago
    If you go to mbasic.facebook.com you'll get the low-end phone version, which allows messenger access.
    - xvf22 9y ago
      Thank you, I remember using this at some point but forgot it. I'm still probably going to trash my account but this does make it much more tolerable. This and i.reddit.com make life on mobile a bit more pleasant.
- taurath 9y ago
  Also, “maybe I guess” now means “yes forever” to them. How many inebriated TOS acknowledgements have happened?
gt640k 9y ago
I hope apple can make this happen
deleted 9y ago
[deleted]
ClassyJacket 9y ago
This is a huge problem that has bugged me for a long time, and is a problem on the iPhone too. It needs to be fixed.
- MBCook 9y ago
  They don’t get access to everything on your phone do they? As I remember (and this was years ago) they could ask for the photo dialogue to pop up and you could choose a photo but the app didn’t actually get access to all of them, only the ones you chose.
  - TheSpiceIsLife 9y ago
    My understanding of the problem is that you click agree or ok or whatever and then... well, we don’t really know what happens after that. Unless you can audit the code, or someone you trust has, who knows what our devices are doing.
    - codeka 9y ago
      But they don't have to ask for access to all your pictures. You can ask Android to show the standard picker, get the one picture you've selected and that's it. Or you can do it the way FB does it, by asking for permission to access all your pictures and build your own non-standard picker...
- comex 9y ago
  On the iPhone this was actually fixed in iOS 11. The standard image picker (UIImagePickerController) now runs out of process, and no longer pops up a permission dialog, but instead just gives the app access to only the photo(s) the user selected. Source: https://stackoverflow.com/a/46594741 https://stackoverflow.com/a/46594741
  - tomwilson 9y ago
    Only fixed if apps want use the UIImagePicker though - many want to show their own image picking interface.
nickpsecurity 9y ago
That's what PowerBoxes are designed to do in the capability-based, security model. In theory, it can happen if Android had different model. http://www.plash.beasts.org/powerbox.html http://www.plash.beasts.org/powerbox.html Note: I'm using this link just to explain the concept rather than endorse anything on the site. It was top of Google results.
- ocdtrekkie 9y ago
  For what it's worth, Fuchsia, the new OS Google is working on, is capability-based.
newnewpdro 9y ago
I don't understand why people don't just email photos to their friends without involving middlemen like facebook? Don't you have your friends in a private contacts list/address book? Isn't it trivial to send a photo attached to an email? What is the problem? Note: I do not and never have used facebook, genuinely don't understand what the deal is here.
- saagarjha 9y ago
  Convenience, I’d expect. Not everyone has the email addresses of all their friends, and email has limits on file sizes, etc.
- jen729w 9y ago
  People are strange. My family all have iPhones, we all use iMessage, yet for some reason we have a group chat on WhatsApp which is where my sister and mam share photos of my nieces. The functionality is no different to iMessage. I don’t know why this happens. It just does.
- Transfinity 9y ago
  I think the main difference between the two mediums is that email is push-based, while Facebook is pull-based. With email, you have to explicitly select recipients. You're essentially saying "here are my photos, I think they are relevant to you specifically". The onus is on the sender to figure out what's good for the receiver, and it's considered rude to send many frivolous or irrelevant messages. Think of how you grumble when you unsubscribe from some company's mailing list - this is an example of this social norm. With Facebook, you say "my photos are here, anyone may look at them if they want". Figuring out whether the content is relevant is now the job of the receiver, not the sender. Facebook's UI is well aligned with this role: unlike email, where you must explicitly download attachments and mark messages as read, on Fb image previews are displayed inline and to never see a message again you must only scroll past it. Advertisements aren't considered intrusive, it's just content from another source that is (in theory) just as easy to ignore. The social dynamic is very different, and so it's used to send a different sort of message than email.
  - 9y ago
lazycouchpotato 9y ago
Custom ROM's for Android phones had this feature. You get to choose whether to allow once, allow all, deny once or deny all. I haven't used a custom ROM in a long time though so I don't know if they still have it.
- Sylos 9y ago
  "Allow once" is different from "Allow just this one picture". With "Allow once", they can still scrape all your pictures, they just have to do it in one go. Custom ROMs unfortunately can't really do much to implement the latter, they'd have to break compatibility with the whole Android ecosystem, which Google knowingly built this way.
  - lazycouchpotato 9y ago
    Do you have any examples of OS'es which have "Allow just this one picture"?
    - Sylos 9y ago
      I mean, Android technically supports it, if the app developer wants to. Then they can send off an "Intent", asking the OS to ask the user to select e.g. one or multiple .jpg and .png files, and then the OS hands those files back to the app. The problem is that not many users understand the implications of just granting permission, so developers don't really need to care. And this dialog that Android opens is roundabout the shittiest, least usable piece of software I've seen in a long while, so for an developer it actually can pay off to ask for full permission and then build your own file selector even if you have no malicious intentions. Others here have mentioned that iOS also supports basically this the same way as Android, though presumably they have not quite managed to make their file picker quite as shitty. And then, well, browsers have worked like this since forever. So, presumably Firefox OS works/-ed like this, too.
      - susanadang 9y ago
        In business such It suport can be achived :https://milliontech.com/it-solution-service-outsourcing/ https://milliontech.com/it-solution-service-outsourcing/
wlesieutre 9y ago
At least on iOS I think you can do this from the Photos app itself using the share sheet -> Messenger rather than using Messenger’s send photo button (which requires the app to get photo permissions). I do agree it would be nice to have “Just once” on pretty much every permission dialog. Apple’s change to mandate an “Only while using the app” on location info after Uber’s location tracking fiasco was a good step in this direction.
ReverseCold 9y ago
This is already possible, some apps launch a file picker app (what you're supposed to do). Instead, apps that want to steal your pictures request access to all of them.
- colordrops 9y ago
  That should be something that doesn't allow the app to get onto the Play store, but Google apparently allows it.
  - halflings 9y ago
    You need that permission for a photo viewer, but I guess you're right that apps asking for overly broad permissions should be banned.
- nitrogen 9y ago
  Android used to have the concept of an Intent. Does that still exist, and if so, why do apps still require full storage permissions? Side note, there was also a project at one point to create Web Intents. I wonder what the web would be like if that had worked out.
  - Groxx 9y ago
    Intents are alive and well, but they've been broadly crippled until recently-ish (well. they still are, but at least now you can read/write stuff in a user-defined folder... kinda.). And the fancier stuff is totally broken on a large number of devices. And it's fairly complicated to support all of it and still be backwards compatible for older OSes that don't have it. But yes! It exists, and most applications could pretty easily use it instead. But most of it seems to be laziness / misunderstanding. And Android's broadly terrible documentation does not help this at all. E.g. a huge number of apps that want external storage permissions just use it to store external caches outside your system partition, which is very nice for people with an SD card / limited internal space. Many companies don't seem aware that this no longer requires any permissions though - you can store internal and external data in your app-sandboxed folders by default.
Sylos 9y ago
Applying this to contacts, too, would also make it somewhat less impossible to use WhatsApp and similar messengers legally. If you don't know why it's illegal: WhatsApp uploads all of your contacts to their server. Granted that their ToS are not themselves ruled illegal at some point, it is on you to get a written permission from all of your contacts that they are okay with you uploading their data to WhatsApp's servers. So, unless you block access to all of your contacts or actually ask every single one of your contacts for written permission, it's illegal. With selective contact access, you could at least attempt to only grant access to contacts that you actually did get written permission from, or I don't know, of which you know for sure that they are using WhatsApp, too. And yes, I do love the thought of hitting on someone in a bar and then pulling out this massive form sheet to ask for their written permission, just so you can ask for their number afterwards.
- thaumasiotes 9y ago
  What legal system are you thinking of? I don't really see myself getting in legal trouble for revealing someone's contact information to a third party. It's a pretty normal thing to do. If I knew your phone number, and somebody else asked me for it, what's stopping me from telling them?
  - dorgo 9y ago
    Germany has privacy protection laws and a privacy protection officer warned that 99% of WhatsApp users act illegal by not asking their contacts for permission before giving WhatsApp access to their contact information.
    - thaumasiotes 9y ago
      If I give your phone number to some guy I met in a bar, is that still fine?
      - Sylos 9y ago
        If I don't sue you, yeah. But if you're not sure that I won't have a problem with it, you should better ask me in advance. In your example, this sounds silly, but it's just not categorically different from examples where it doesn't, like say someone who stalks me asks you for my phone number, or a scam caller does.
oliwarner 9y ago
You can do this if you start from the photo (in another app) and use its share option.
pmlnr 9y ago
There is this thing called email.
p49k 9y ago
At least on iOS, you can get around this by copying/pasting the photo instead of using the sharing UI.
aj7 9y ago
Get it into your photo app. Or in a folder. Send it from there.

starik36 9y ago

That bugs me too. I've resorted to placing the photo on the clipboard, then paste it. A workaround, but well worth preserving your sanity.

xvf22 9y ago
Heh I don't bother with the app and suffer with the web interface. Annoyingly I now need to "Request Desktop Site" to use messenger or else it tries to get me to install the app. The artificial friction they're put in place has pushed me ever closer to just deleting my account.
- prutschman 9y ago
  If you go to mbasic.facebook.com you'll get the low-end phone version, which allows messenger access.
  - xvf22 9y ago
    Thank you, I remember using this at some point but forgot it. I'm still probably going to trash my account but this does make it much more tolerable. This and i.reddit.com make life on mobile a bit more pleasant.
taurath 9y ago
Also, “maybe I guess” now means “yes forever” to them. How many inebriated TOS acknowledgements have happened?

gt640k 9y ago

I hope apple can make this happen

deleted 9y ago

[deleted]

ClassyJacket 9y ago

This is a huge problem that has bugged me for a long time, and is a problem on the iPhone too. It needs to be fixed.

MBCook 9y ago
They don’t get access to everything on your phone do they? As I remember (and this was years ago) they could ask for the photo dialogue to pop up and you could choose a photo but the app didn’t actually get access to all of them, only the ones you chose.
- TheSpiceIsLife 9y ago
  My understanding of the problem is that you click agree or ok or whatever and then... well, we don’t really know what happens after that. Unless you can audit the code, or someone you trust has, who knows what our devices are doing.
  - codeka 9y ago
    But they don't have to ask for access to all your pictures. You can ask Android to show the standard picker, get the one picture you've selected and that's it. Or you can do it the way FB does it, by asking for permission to access all your pictures and build your own non-standard picker...
comex 9y ago
On the iPhone this was actually fixed in iOS 11. The standard image picker (UIImagePickerController) now runs out of process, and no longer pops up a permission dialog, but instead just gives the app access to only the photo(s) the user selected. Source: https://stackoverflow.com/a/46594741 https://stackoverflow.com/a/46594741
- tomwilson 9y ago
  Only fixed if apps want use the UIImagePicker though - many want to show their own image picking interface.

nickpsecurity 9y ago

That's what PowerBoxes are designed to do in the capability-based, security model. In theory, it can happen if Android had different model. http://www.plash.beasts.org/powerbox.html http://www.plash.beasts.org/powerbox.html Note: I'm using this link just to explain the concept rather than endorse anything on the site. It was top of Google results.

ocdtrekkie 9y ago
For what it's worth, Fuchsia, the new OS Google is working on, is capability-based.

newnewpdro 9y ago

I don't understand why people don't just email photos to their friends without involving middlemen like facebook? Don't you have your friends in a private contacts list/address book? Isn't it trivial to send a photo attached to an email? What is the problem? Note: I do not and never have used facebook, genuinely don't understand what the deal is here.

saagarjha 9y ago
Convenience, I’d expect. Not everyone has the email addresses of all their friends, and email has limits on file sizes, etc.
jen729w 9y ago
People are strange. My family all have iPhones, we all use iMessage, yet for some reason we have a group chat on WhatsApp which is where my sister and mam share photos of my nieces. The functionality is no different to iMessage. I don’t know why this happens. It just does.
Transfinity 9y ago
I think the main difference between the two mediums is that email is push-based, while Facebook is pull-based. With email, you have to explicitly select recipients. You're essentially saying "here are my photos, I think they are relevant to you specifically". The onus is on the sender to figure out what's good for the receiver, and it's considered rude to send many frivolous or irrelevant messages. Think of how you grumble when you unsubscribe from some company's mailing list - this is an example of this social norm. With Facebook, you say "my photos are here, anyone may look at them if they want". Figuring out whether the content is relevant is now the job of the receiver, not the sender. Facebook's UI is well aligned with this role: unlike email, where you must explicitly download attachments and mark messages as read, on Fb image previews are displayed inline and to never see a message again you must only scroll past it. Advertisements aren't considered intrusive, it's just content from another source that is (in theory) just as easy to ignore. The social dynamic is very different, and so it's used to send a different sort of message than email.
- 9y ago

lazycouchpotato 9y ago

Custom ROM's for Android phones had this feature. You get to choose whether to allow once, allow all, deny once or deny all. I haven't used a custom ROM in a long time though so I don't know if they still have it.

Sylos 9y ago
"Allow once" is different from "Allow just this one picture". With "Allow once", they can still scrape all your pictures, they just have to do it in one go. Custom ROMs unfortunately can't really do much to implement the latter, they'd have to break compatibility with the whole Android ecosystem, which Google knowingly built this way.
- lazycouchpotato 9y ago
  Do you have any examples of OS'es which have "Allow just this one picture"?
  - Sylos 9y ago
    I mean, Android technically supports it, if the app developer wants to. Then they can send off an "Intent", asking the OS to ask the user to select e.g. one or multiple .jpg and .png files, and then the OS hands those files back to the app. The problem is that not many users understand the implications of just granting permission, so developers don't really need to care. And this dialog that Android opens is roundabout the shittiest, least usable piece of software I've seen in a long while, so for an developer it actually can pay off to ask for full permission and then build your own file selector even if you have no malicious intentions. Others here have mentioned that iOS also supports basically this the same way as Android, though presumably they have not quite managed to make their file picker quite as shitty. And then, well, browsers have worked like this since forever. So, presumably Firefox OS works/-ed like this, too.
    - susanadang 9y ago
      In business such It suport can be achived :https://milliontech.com/it-solution-service-outsourcing/ https://milliontech.com/it-solution-service-outsourcing/

wlesieutre 9y ago

At least on iOS I think you can do this from the Photos app itself using the share sheet -> Messenger rather than using Messenger’s send photo button (which requires the app to get photo permissions). I do agree it would be nice to have “Just once” on pretty much every permission dialog. Apple’s change to mandate an “Only while using the app” on location info after Uber’s location tracking fiasco was a good step in this direction.

ReverseCold 9y ago

This is already possible, some apps launch a file picker app (what you're supposed to do). Instead, apps that want to steal your pictures request access to all of them.

colordrops 9y ago
That should be something that doesn't allow the app to get onto the Play store, but Google apparently allows it.
- halflings 9y ago
  You need that permission for a photo viewer, but I guess you're right that apps asking for overly broad permissions should be banned.
nitrogen 9y ago
Android used to have the concept of an Intent. Does that still exist, and if so, why do apps still require full storage permissions? Side note, there was also a project at one point to create Web Intents. I wonder what the web would be like if that had worked out.
- Groxx 9y ago
  Intents are alive and well, but they've been broadly crippled until recently-ish (well. they still are, but at least now you can read/write stuff in a user-defined folder... kinda.). And the fancier stuff is totally broken on a large number of devices. And it's fairly complicated to support all of it and still be backwards compatible for older OSes that don't have it. But yes! It exists, and most applications could pretty easily use it instead. But most of it seems to be laziness / misunderstanding. And Android's broadly terrible documentation does not help this at all. E.g. a huge number of apps that want external storage permissions just use it to store external caches outside your system partition, which is very nice for people with an SD card / limited internal space. Many companies don't seem aware that this no longer requires any permissions though - you can store internal and external data in your app-sandboxed folders by default.

Sylos 9y ago

Applying this to contacts, too, would also make it somewhat less impossible to use WhatsApp and similar messengers legally. If you don't know why it's illegal: WhatsApp uploads all of your contacts to their server. Granted that their ToS are not themselves ruled illegal at some point, it is on you to get a written permission from all of your contacts that they are okay with you uploading their data to WhatsApp's servers. So, unless you block access to all of your contacts or actually ask every single one of your contacts for written permission, it's illegal. With selective contact access, you could at least attempt to only grant access to contacts that you actually did get written permission from, or I don't know, of which you know for sure that they are using WhatsApp, too. And yes, I do love the thought of hitting on someone in a bar and then pulling out this massive form sheet to ask for their written permission, just so you can ask for their number afterwards.

thaumasiotes 9y ago
What legal system are you thinking of? I don't really see myself getting in legal trouble for revealing someone's contact information to a third party. It's a pretty normal thing to do. If I knew your phone number, and somebody else asked me for it, what's stopping me from telling them?
- dorgo 9y ago
  Germany has privacy protection laws and a privacy protection officer warned that 99% of WhatsApp users act illegal by not asking their contacts for permission before giving WhatsApp access to their contact information.
  - thaumasiotes 9y ago
    If I give your phone number to some guy I met in a bar, is that still fine?
    - Sylos 9y ago
      If I don't sue you, yeah. But if you're not sure that I won't have a problem with it, you should better ask me in advance. In your example, this sounds silly, but it's just not categorically different from examples where it doesn't, like say someone who stalks me asks you for my phone number, or a scam caller does.

oliwarner 9y ago

You can do this if you start from the photo (in another app) and use its share option.

pmlnr 9y ago

There is this thing called email.

p49k 9y ago

At least on iOS, you can get around this by copying/pasting the photo instead of using the sharing UI.

aj7 9y ago

Get it into your photo app. Or in a folder. Send it from there.