4 ms·

"access to read, delete or change all content on the phone"... I would think if Android allows an app ability to do that then that's a huge security hole.

by throw7 4y ago

4ggr0 4y ago
I assume that Apps like TitaniumBackup or whatever they're called need such permission in order to make Backups of your phone, so it's not that worrysome to me that they exist at all. However, it's definitely weird that this World Cup app needs such permissions. EDIT: Apparently TitaniumBackup needs root access, but I think my point about backups in general still stands.
- themoonisachees 4y ago
  Android apps can request access to /sdcard/ for things like file managers. Everything else needs root access, or using adb via USB
  - 4ggr0 4y ago
    So this file access permission at most gives access to the whole /sdcard, which does not sound to me like it has to be a bad thing, right?
    - themoonisachees 4y ago
      Kind of? /sdcard/ (a misnomer, it's just really a directory like /home/user/ on unix) perms are asked all the time by apps that don't need it at all because developpers don't understand that apps have their own config directory free of permissions, so they put stuff in /sdcard/ which triggers the perm popup. In this case i'm worried because /sdcard/ perms give acces to all downloads, and all pictures, downloaded or taken. This, coupled with the UAEs track record concerning LGBTQ rights and digital surveillance, adding to the fact there is no discernable reason this app needs /sdcard/ access is troubling. Imagine installing the app, and getting put in prison because you have pictures with your gay partner on it.
      - 4ggr0 4y ago
        Oh I would definitely also be worried about this specific app requesting this permission. My questions about this permission are based on the other person saying "if Android allows an app ability to do that then that's a huge security hole". In this case it does seem like a security hole, but that can't be said as a general statement in my opinion.
gruez 4y ago
I don't even think that's real. Going off the permissions listed on the play store listing[1], I can't find any permission that remotely resembles "access to read, delete or change all content on the phone". [1] https://play.google.com/store/apps/details?id=com.moi.covid19 https://play.google.com/store/apps/details?id=com.moi.covid1...

"access to read, delete or change all content on the phone"... I would think if Android allows an app ability to do that then that's a huge security hole.

by throw7 4y ago

"access to read, delete or change all content on the phone"... I would think if Android allows an app ability to do that then that's a huge security hole.

4ggr0 4y ago

I assume that Apps like TitaniumBackup or whatever they're called need such permission in order to make Backups of your phone, so it's not that worrysome to me that they exist at all. However, it's definitely weird that this World Cup app needs such permissions. EDIT: Apparently TitaniumBackup needs root access, but I think my point about backups in general still stands.

themoonisachees 4y ago
Android apps can request access to /sdcard/ for things like file managers. Everything else needs root access, or using adb via USB
- 4ggr0 4y ago
  So this file access permission at most gives access to the whole /sdcard, which does not sound to me like it has to be a bad thing, right?
  - themoonisachees 4y ago
    Kind of? /sdcard/ (a misnomer, it's just really a directory like /home/user/ on unix) perms are asked all the time by apps that don't need it at all because developpers don't understand that apps have their own config directory free of permissions, so they put stuff in /sdcard/ which triggers the perm popup. In this case i'm worried because /sdcard/ perms give acces to all downloads, and all pictures, downloaded or taken. This, coupled with the UAEs track record concerning LGBTQ rights and digital surveillance, adding to the fact there is no discernable reason this app needs /sdcard/ access is troubling. Imagine installing the app, and getting put in prison because you have pictures with your gay partner on it.
    - 4ggr0 4y ago
      Oh I would definitely also be worried about this specific app requesting this permission. My questions about this permission are based on the other person saying "if Android allows an app ability to do that then that's a huge security hole". In this case it does seem like a security hole, but that can't be said as a general statement in my opinion.

gruez 4y ago

I don't even think that's real. Going off the permissions listed on the play store listing[1], I can't find any permission that remotely resembles "access to read, delete or change all content on the phone". [1] https://play.google.com/store/apps/details?id=com.moi.covid19 https://play.google.com/store/apps/details?id=com.moi.covid1...