4 ms·
Unfortunately, that also won't solve anything. Let's say that I installed Telechat (fake chat app) and it asked for SMS, well yea, I'm going to approve it beca
by mikhailt 8y ago
Unfortunately, that also won't solve anything.
Let's say that I installed Telechat (fake chat app) and it asked for SMS, well yea, I'm going to approve it because it is a chat app.
Okay, how does that prevent Telechat from collecting my data and selling it?
I understand what you're trying to say but it is not solved by using app policies (controlling which piece of data they can access) because such policies does not prevent said apps from violating your privacy.
That isn't to say that such app policies shouldn't be a thing, it's a great tool and limits the potential damage but it has nothing to do with privacy.
- AnthonyMouse 8y ago> Unfortunately, that also won't solve anything. It solves the flashlight app accessing your SMS messages. > Let's say that I installed Telechat (fake chat app) and it asked for SMS, well yea, I'm going to approve it because it is a chat app. But then that's a different problem. It's no longer the app having permissions it shouldn't, it's the user explicitly choosing to trust a malicious app. The solution to that is to have a third party service to verify that apps aren't doing anything malicious. That is nominally what Apple does with the App Store, but there are two main problems with their implementation: (1) You can't choose someone else to trust to verify iOS apps for you, it has to be Apple and there is no alternative if they get it wrong or reject non-malicious apps because they don't want competition. (2) It's not enough to deny malicious apps from accessing SMS, they also need to allow non-malicious apps to do it. This would largely be solved by fixing (1) because then a provider that failed to do (2) would not have to be used.