3 ms·
Not true. There can be capabilities connected to the data stream and objects used to read emails and both platform and Play Store can reject typical invalid use
by AstralStorm 8y ago
Not true. There can be capabilities connected to the data stream and objects used to read emails and both platform and Play Store can reject typical invalid use. (Just like with intents giving temporary permissions.)
It would also patch some confused deputy bugs.
Make that part of API 29 or such to not break apps.
Very sneaky use can be partly detected too, but then we're talking specifically malicious apps.
- ajross 8y agoIt sounds like you're trying to reinvent something like Perl's "taint" bit, but for privacy specifically? No one does that. It really didn't even work as much of a security barrier for Perl CGI scripts in 1996...