5 ms·

Applications require permissions to run. Many require internet permission although it makes no sense. For instance all Google keyboards have internet permissio

Applications require permissions to run. Many require internet permission although it makes no sense. For instance all Google keyboards have internet permission. And most others. That something that can record and transmit every single thing one types has that permission, to me, seems insane and I certainly will use only keyboards that do not have such asinine requirement. Edit : https://fixitalready.eff.org/android/#/ https://fixitalready.eff.org/android/#/

londons_explore 8y ago
Even without Internet permission there are easy ways to exfiltrate critical data. For example, the app could just open the browser set to http://myapp.com/?secretdata=Ultramanoids_password http://myapp.com/?secretdata=Ultramanoids_password How are you going to stop that? Have the browser stop and ask before loading the web page?
- chopin 8y ago
  Wouldn't that be visible?
  - londons_explore 8y ago
    Yes, but by then your data is already exfiltrated. There are also a bunch of ways of doing it in non-visible ways by using API's of other apps
chopin 8y ago
Looked up, thanks. Seems you can't grant or revoke that permission. I don't understand why having it at all if you cannot change it.
- Ultramanoid 8y ago
  I use my own system, based on LineageOS [1], which comes with settings to block internet permission on any application. It's one of LineageOS' features. ( On top of that I root my devices and use AFWall+ [2] which also creates a configurable firewall with iptables. ) [1] https://lineageos.org/ https://lineageos.org/ [2] https://f-droid.org/en/packages/dev.ukanth.ufirewall/ https://f-droid.org/en/packages/dev.ukanth.ufirewall/
- Ultramanoid 8y ago
  Well, one use it has is to know when to stay away from something that requires it despite not needing it. Do not install such application.
chopin 8y ago
Amy keyboards you could recommend? Ideally available on f-droid.
- mayamatrix 8y ago
  "Hacker's Keyboard" on f-droid had a long and venerable history.
- Ultramanoid 8y ago
  I need Japanese and Chinese, also handwritten for kanji, and the only one that combines both without analytics or internet permission currently is Multiling O [1] but I am hoping for an alternative, because it is only distributed through the Play Store, and I do not use Google services. Otherwise, open source and on F-Droid there's AnySoftKeyboard [2] and even a build of Mozc [3], this last one unfortunately with internet permission. [1] https://play.google.com/store/apps/details?id=kl.ime.oh https://play.google.com/store/apps/details?id=kl.ime.oh [2] https://f-droid.org/en/packages/com.menny.android.anysoftkeyboard/ https://f-droid.org/en/packages/com.menny.android.anysoftkey... [3] https://f-droid.org/en/packages/org.mozc.android.inputmethod.japanese/ https://f-droid.org/en/packages/org.mozc.android.inputmethod...

londons_explore 8y ago

Even without Internet permission there are easy ways to exfiltrate critical data. For example, the app could just open the browser set to http://myapp.com/?secretdata=Ultramanoids_password http://myapp.com/?secretdata=Ultramanoids_password How are you going to stop that? Have the browser stop and ask before loading the web page?

chopin 8y ago
Wouldn't that be visible?
- londons_explore 8y ago
  Yes, but by then your data is already exfiltrated. There are also a bunch of ways of doing it in non-visible ways by using API's of other apps

chopin 8y ago

Looked up, thanks. Seems you can't grant or revoke that permission. I don't understand why having it at all if you cannot change it.

Ultramanoid 8y ago
I use my own system, based on LineageOS [1], which comes with settings to block internet permission on any application. It's one of LineageOS' features. ( On top of that I root my devices and use AFWall+ [2] which also creates a configurable firewall with iptables. ) [1] https://lineageos.org/ https://lineageos.org/ [2] https://f-droid.org/en/packages/dev.ukanth.ufirewall/ https://f-droid.org/en/packages/dev.ukanth.ufirewall/
Ultramanoid 8y ago
Well, one use it has is to know when to stay away from something that requires it despite not needing it. Do not install such application.

chopin 8y ago

Amy keyboards you could recommend? Ideally available on f-droid.

mayamatrix 8y ago
"Hacker's Keyboard" on f-droid had a long and venerable history.
Ultramanoid 8y ago
I need Japanese and Chinese, also handwritten for kanji, and the only one that combines both without analytics or internet permission currently is Multiling O [1] but I am hoping for an alternative, because it is only distributed through the Play Store, and I do not use Google services. Otherwise, open source and on F-Droid there's AnySoftKeyboard [2] and even a build of Mozc [3], this last one unfortunately with internet permission. [1] https://play.google.com/store/apps/details?id=kl.ime.oh https://play.google.com/store/apps/details?id=kl.ime.oh [2] https://f-droid.org/en/packages/com.menny.android.anysoftkeyboard/ https://f-droid.org/en/packages/com.menny.android.anysoftkey... [3] https://f-droid.org/en/packages/org.mozc.android.inputmethod.japanese/ https://f-droid.org/en/packages/org.mozc.android.inputmethod...