4 ms·

Exactly what access do you think they have that you don’t specifically allow that they don’t have from a web browser - running on the same device?

chasing0entropy 1y ago
That's an easy one, hold my beer: Pwa with permissions granted gives access to: Location, create notification, phone state, phone #, IMEI, motion data Mobile app with permissions gives access to EVERYTHING a pwa gets PLUS, Contacts, sms, notification content, biometrics data, web browsing data, phone activity history, location history, camera access, microphone access, NFC access, near device history, nearby wifi listing, saved wifi networks, Bluetooth device ID, Bluetooth beacons nearby, some device settings, personal data access(photos/music)
- raw_anon_1111 1y ago
  So you mean if I give an app permission to do something it has permissions to do that thing? How is that a security issue to be worried about? And iOS doesn’t allow third party apps to intercept SMS messages.
  - dwedge 1y ago
    It's rare for me to see this sarcastic attitude in replies on Hacker News. It's common on Reddit, but not here.
    - raw_anon_1111 1y ago
      I mean it wasn’t a great argument that apps can do stuff after you give it permission to do stuff.
- senordevnyc 1y ago
  Maybe on Android. Literally half of that shit isn’t accessible by iOS apps even with full permissions. This feels like you’re just throwing shit against the wall.
vachina 1y ago
Apps can leverage system APIs, gain always-on persistence. Not long ago Facebook (Meta) was caught spinning up localhost server on Android devices to gather activities outside of the app.
- raw_anon_1111 1y ago
  On iOS devices you can turn off the ability to allow apps to wake up on a one by one basis “background refresh”. And if you are concerned with your privacy, it’s nonsensical to buy a phone run by an adtech company that only made the operating system in the first place to sell ads and collect your data

chasing0entropy 1y ago

That's an easy one, hold my beer: Pwa with permissions granted gives access to: Location, create notification, phone state, phone #, IMEI, motion data Mobile app with permissions gives access to EVERYTHING a pwa gets PLUS, Contacts, sms, notification content, biometrics data, web browsing data, phone activity history, location history, camera access, microphone access, NFC access, near device history, nearby wifi listing, saved wifi networks, Bluetooth device ID, Bluetooth beacons nearby, some device settings, personal data access(photos/music)

raw_anon_1111 1y ago
So you mean if I give an app permission to do something it has permissions to do that thing? How is that a security issue to be worried about? And iOS doesn’t allow third party apps to intercept SMS messages.
- dwedge 1y ago
  It's rare for me to see this sarcastic attitude in replies on Hacker News. It's common on Reddit, but not here.
  - raw_anon_1111 1y ago
    I mean it wasn’t a great argument that apps can do stuff after you give it permission to do stuff.
senordevnyc 1y ago
Maybe on Android. Literally half of that shit isn’t accessible by iOS apps even with full permissions. This feels like you’re just throwing shit against the wall.

vachina 1y ago

Apps can leverage system APIs, gain always-on persistence. Not long ago Facebook (Meta) was caught spinning up localhost server on Android devices to gather activities outside of the app.

raw_anon_1111 1y ago
On iOS devices you can turn off the ability to allow apps to wake up on a one by one basis “background refresh”. And if you are concerned with your privacy, it’s nonsensical to buy a phone run by an adtech company that only made the operating system in the first place to sell ads and collect your data