6 ms·
None of these answer my question though. Repackaging, leveraging a security flaw to use xposed, etc, all of these add more vectors that can compromise your dat
by on_and_off 7y ago
None of these answer my question though.
Repackaging, leveraging a security flaw to use xposed, etc, all of these add more vectors that can compromise your data.
You need to have complete trust in the person that wrote these, way more trust than just in the creators of an app that can just use the permissions you give them :/
- ignoramous 7y agoI agree. My point was the security risk is worth it if extensibility is achieved. I cited the example of browsers and content blockers. There are many intrusive permissions that already are major privacy and security risks-- Launchers, SMS apps, VPNs, and even alarm clocks that mine location data. The playing ground isn't level, right now, to counter this intrusion. One way to affect what other apps do, without root, is to route the traffic via VPN and firewall as appropriate. That's possible only when a user enables a VPN to do so. Similarly, the plugins could also require a user to explicitly grant or deny permission for them to work. This is enough of a security measure as its on par with the current system in Android (regardless of its notoriety). > None of these answer my question though. May be I understood you wrong. I hope I made my point clear to you above?