4 ms·
> I'm convinced many companies purposely gimp their web sites to drive people to apps. And then their app is just a webview wrapper. But that still gives them
by jsheard 11mo ago
> I'm convinced many companies purposely gimp their web sites to drive people to apps.
And then their app is just a webview wrapper. But that still gives them more access to your device.
- raw_anon_1111 11mo agoExactly what access do you think they have that you don’t specifically allow that they don’t have from a web browser - running on the same device?
- chasing0entropy 11mo agoThat's an easy one, hold my beer: Pwa with permissions granted gives access to: Location, create notification, phone state, phone #, IMEI, motion data Mobile app with permissions gives access to EVERYTHING a pwa gets PLUS, Contacts, sms, notification content, biometrics data, web browsing data, phone activity history, location history, camera access, microphone access, NFC access, near device history, nearby wifi listing, saved wifi networks, Bluetooth device ID, Bluetooth beacons nearby, some device settings, personal data access(photos/music)
- raw_anon_1111 11mo agoSo you mean if I give an app permission to do something it has permissions to do that thing? How is that a security issue to be worried about? And iOS doesn’t allow third party apps to intercept SMS messages.
- dwedge 11mo agoIt's rare for me to see this sarcastic attitude in replies on Hacker News. It's common on Reddit, but not here.
- raw_anon_1111 11mo agoI mean it wasn’t a great argument that apps can do stuff after you give it permission to do stuff.
- senordevnyc 11mo agoMaybe on Android. Literally half of that shit isn’t accessible by iOS apps even with full permissions. This feels like you’re just throwing shit against the wall.
- vachina 11mo agoApps can leverage system APIs, gain always-on persistence. Not long ago Facebook (Meta) was caught spinning up localhost server on Android devices to gather activities outside of the app.
- raw_anon_1111 11mo agoOn iOS devices you can turn off the ability to allow apps to wake up on a one by one basis “background refresh”. And if you are concerned with your privacy, it’s nonsensical to buy a phone run by an adtech company that only made the operating system in the first place to sell ads and collect your data