3 ms·
If I am giving an app explicit permission to read my email then I would expect to be asked if I give it permission to send/write/save my email. If the user isn'
by itronitron 8y ago
If I am giving an app explicit permission to read my email then I would expect to be asked if I give it permission to send/write/save my email. If the user isn't asked that question then why would they think the app can do that. Full disclosure >> I am a technical person.
- ajross 8y agoHow do you propose to enforce such a restriction? This is the halting problem. If the app can read it, it can copy it.
- AstralStorm 8y agoNot true. There can be capabilities connected to the data stream and objects used to read emails and both platform and Play Store can reject typical invalid use. (Just like with intents giving temporary permissions.) It would also patch some confused deputy bugs. Make that part of API 29 or such to not break apps. Very sneaky use can be partly detected too, but then we're talking specifically malicious apps.
- ajross 8y agoIt sounds like you're trying to reinvent something like Perl's "taint" bit, but for privacy specifically? No one does that. It really didn't even work as much of a security barrier for Perl CGI scripts in 1996...