2 ms·

You don't see the difference between allowing whatsapp to run, vs allowing whatsapp to install apps? You don't see the difference between allowing a dedicated

You don't see the difference between allowing whatsapp to run, vs allowing whatsapp to install apps? You don't see the difference between allowing a dedicated app installer app written by an author with no other goal and no other source of reputation to install apps, vs allowing a random app to install apps just to hopefully only use that power to keep itself updated and do so in a way that only serves your interests and not those of the apps author? (ie it will never be a Facebook and one day decide that it wants you to use Messenger, and that's the nicest example let alone something hidden) The thing that you give permission to install apps must be a seperate thing written by a seperate author who has no incentive to install or remove any other apps.

vednig 2y ago
Maybe android can limit allowing apps to install updates of themselves, only if this could be implemented, https://issuetracker.google.com/issues/378112214 https://issuetracker.google.com/issues/378112214
maccard 2y ago
I do see a theoretical difference, but in reality there’s no guarantee that they don’t ship AB testing in the ipa/apk and do it at runtime. In fact, everything points to them doing exactly that already. By running a closed source medsenger client with a closed backend service, they have the power to say “WhatsApp off, use messenger now” if they want to- and they don’t need to push a client update to do so. I’m not concerned about meta having root access to my device - they already have access to my contacts for messaging, all ny message data (I’m in Europe, WhatsApp is my default communication method),Bluetooth and WiFi settings because you need it for location stuff. They have the data, and the permissions already. The only thing they can’t do is install another app (which I would have to grant the permissions WhatsApp already has) to do the nasty, but they can just do the nasty in the app I’m already running.

vednig 2y ago

Maybe android can limit allowing apps to install updates of themselves, only if this could be implemented, https://issuetracker.google.com/issues/378112214 https://issuetracker.google.com/issues/378112214

maccard 2y ago

I do see a theoretical difference, but in reality there’s no guarantee that they don’t ship AB testing in the ipa/apk and do it at runtime. In fact, everything points to them doing exactly that already. By running a closed source medsenger client with a closed backend service, they have the power to say “WhatsApp off, use messenger now” if they want to- and they don’t need to push a client update to do so. I’m not concerned about meta having root access to my device - they already have access to my contacts for messaging, all ny message data (I’m in Europe, WhatsApp is my default communication method),Bluetooth and WiFi settings because you need it for location stuff. They have the data, and the permissions already. The only thing they can’t do is install another app (which I would have to grant the permissions WhatsApp already has) to do the nasty, but they can just do the nasty in the app I’m already running.