3 ms·
> If I'm not mistaken, that means that any app that's granted permissions to the file system could just read common storage locations like your Facebook cache d
by boring_twenties 7y ago
> If I'm not mistaken, that means that any app that's granted permissions to the file system could just read common storage locations like your Facebook cache directory to gather personal information.
That's only true for the "shared" storage locations (SD card, and internal emulated SD card). Unless facebook is braindead they should be keeping private data in app storage, which is only accessible to the app itself (each app has its own Unix uid, and app storage is mode 600).
- dangus 7y agoYou’re right, I misunderstood the isolated storage functionality. However, I think that offering any way to interact with shared storage was also something of a design mistake on Android, but I could see someone disagreeing with that. Facebook is probably doing it right but someone else might not be. I’d rather the operating system prevent the bad action in the first place.
- boring_twenties 7y agoNot sure I can agree that shared storage shouldn't exist, just because it could be misused by any given app. Some things simply must be shared: your camera and gallery apps both need access to your photos. It's like, if a Unix program made private files world-readable by default, you wouldn't blame Unix for providing permissions in the first place.