6 ms·
APIs are great.. i want an app to be able to list all the apps installed. I just don't want facebook app to do it, because it really doesn't need that data, and
by ajsnigrutin 6y ago
APIs are great.. i want an app to be able to list all the apps installed. I just don't want facebook app to do it, because it really doesn't need that data, and I don't want to give it to them.
This should be done the same as with location and microphone access... ie. "ask the user". "Flashlight 2000 DX app wants to access list of apps installed - allow once, allow always, deny now, deny always". Facebook wants to track 50 different things? Well.. ask the user 50 different times and try to explain why you want access to their call history and calendar data (adding calendar entries could also be a write-only option, with optional unique ids to change/remove entries).... and give your UX team a headache. Also, "deny" should be the "bolded" default. Maybe even give the user a list of unchecked permission the app wants, with explanations why it needs them, and have the user check the ones they want to give to the app (default state is unchecked (deny)).
Also granularity is key... giving location access for bluetooth connections, giving "manage calls" access to stop playing music when you get a call, etc. is just stupid.
- unishark 6y agoI don't think they're great, it seems like a way of obfuscating what the app really does. Your approach might work for savvy or paranoid users, but not everyone notices much beyond "contains ads" or such. Apple needs to force them to be up front from the very beginning that their stupid game or screensaver or else is also a tracking app. And boot any app that uses your phone to do anything beyond what they told you they would do in the app store description.
- paulryanrogers 6y agoDidn't Apple have an ad mocking all the access prompts in Windows Vista? My how things have changed
- 2muchcoffeeman 6y agoI guess timing and education matters. People would just click through all those Windows alerts. So they were useless. And maybe people weren't so savvy about privacy and security. Nowadays, people are more aware about such things, so maybe you can start to assume the users are more comfortable about computing and the internet. So they should change their direction. I'd agree with the sentiment if it was like Samsung making fun of removing a headphone jack, only to do the same thing less than a year later.
- zepto 6y agoThis is nothing like that. Vista popped up inscrutable boxes for all kinds of actions, with no explanation. This is a small number of permissions, each explained clearly. If Microsoft had done it this way, nobody would have laughed.
- paulryanrogers 6y agoIDK MacOS blocks saving exports from Sequel Ace every single time I try. Have to do a file dialog dance each time or it silently fails. Guess devs just have to stay on top of the changing API requirements.
- zepto 6y ago> Guess devs just have to stay on top of the changing API requirements. Yes.
- ajsnigrutin 6y agoBut i want to be able to use an app to act as a VNC server (screen capture, inputs,...), or an app (eg. tasker automation) to start a vpn connection and an ssh server when i send a SMS to the device. I just don't want a screensaver app to be able to do that. Basically, i'd be happy if those "risky" permissions would be hidden in app management in settings, disabled by default, and enabled only by power users. The problem now is, that due to fscked up permissions schemes, some apps are unable to work at all, even the stuff they work now, some due to play store issues (eg. termux because they want to run downloaded code), and some due to missing apis (eg vnc servers).
- nuker 6y ago> APIs are great.. i want an app to be able to list all the apps installed. That a big No. List of apps uniquely identifies the device and the user. Is this api available??
- ajsnigrutin 6y agoContact list access does that too... and a bunch of apps get it. I just want the app to ask me, and me to decide if the app really needs it or not.
- nuker 6y agoOn iOS they ask for contacts access, and you can deny.