3 ms·

what web-apps offer me, as a user, is peace of mind in terms of security - something i dont get with native apps that ask for broad, overreaching permissions. t

what web-apps offer me, as a user, is peace of mind in terms of security - something i dont get with native apps that ask for broad, overreaching permissions. there are many many native apps i refuse to install simply based on those grounds. if facebook ditches their mobile site, that will be the end of facebook on my phone for me.

t0 14y ago
This article isn't actually about mobile sites, it's referring to tools that compile HTML5 into native code like Phonegap. But yes, when you're giving all kinds of permissions to strangers, chances are somebody is using your data maliciously.
- argonaut 14y ago
  Phonegap doesn't compile HTML5 to native. It uses web views (HTML5 embedded in native code).
mattquiros 14y ago
I don't make a habit of persuading people to change their preferences, but a couple of questions: 1. Don't web apps need cookies enabled in your browser, so technically they can still track your browsing history and behavior, at least to some extent? How is that different from your privacy concerns with native apps? 2. How do you think about installing applications on your desktop/laptop computer then, since doing so grants them certain permissions, and not doing so prevents you from doing certain things? 3. More of a comment, than a question. I don't think Facebook will ever ditch their mobile site. Mobile sites are a replacement of the "desktop" site instead of the native app. It's just accessing Facebook via the browser but with a mobile-friendly UI.
- jiggy2011 14y ago
  An installed application can potentially do a lot more than a cookie. For example, open files on the filesystem, read text messages & phone numbers and upload these to a third party server and sometimes even modify or install other software. The same issues exist with desktop applications of course, for example various spyware toolbars etc so you always have to make some judgement call. The main difference seems to be that when you access a website on your desktop you are much less likely to get some popup nagging you to download a desktop app to consume the content vs a smartphone app. I guess because most desktops are fast enough that you can get reasonable performance from just HTML5 or flash.
- leeoniya 14y ago
  1. there's a vast difference between a third party simply tracking which sites i visit vs an app having access to my GPS location, address books, call history, etc.., whenever it pleases. with a web browser, i can "share my location" as i desire...if i want to find nearby restaurants on yelp's mobile site, i'll share my location once. with an app you just say "yes, you have permission to read my gps", you have no control of when or how often it does this. 2. on my desktop, there's no guarantee that any specific info will be in the same place. for example i use thunderbird portable in an encrypted container for my email and contacts. on a phone, your contacts are pretty much in the same place and every app knows how to get to them, there's much less variance. 3. you may have a point, but without a good mobile site, they can coerce people to use the app by providing a shitty experience in the browser, cause an app can get to a lot more of your juicy data which they crave.
kayoone 14y ago
there are alot of apps that are essentially a webview component showing some website and they still send you push notifications etc. (eg. the old HTML5 facebook app) This is not about App-Store vs Web distribution, its about real Apps and their underlying tech.
pjmlp 14y ago
> what web-apps offer me, as a user, is peace of mind in terms of security Are you sure? The browser also has security exploits, being coded in C/C++. With JavaScript you can also do something similar to fork bombs. And lets not forget the plugins as well or the JavaScript APIs to access your data.
- leeoniya 14y ago
  i would say there's a huge difference between a web browser that happens to have an exploit vs willfully surrendering your own privacy to an app designed to harvest your data. i'll take the former any day of the week.
  - pjmlp 14y ago
    You forgot the part about JavaScript APIs to your data.
    - leeoniya 14y ago
      if anything 3rd party asks for permanent access to my data, it's not getting installed. javascript APIs can be configured to ask you every time for permission, in fact that's the default.

t0 14y ago

This article isn't actually about mobile sites, it's referring to tools that compile HTML5 into native code like Phonegap. But yes, when you're giving all kinds of permissions to strangers, chances are somebody is using your data maliciously.

argonaut 14y ago
Phonegap doesn't compile HTML5 to native. It uses web views (HTML5 embedded in native code).

mattquiros 14y ago

I don't make a habit of persuading people to change their preferences, but a couple of questions: 1. Don't web apps need cookies enabled in your browser, so technically they can still track your browsing history and behavior, at least to some extent? How is that different from your privacy concerns with native apps? 2. How do you think about installing applications on your desktop/laptop computer then, since doing so grants them certain permissions, and not doing so prevents you from doing certain things? 3. More of a comment, than a question. I don't think Facebook will ever ditch their mobile site. Mobile sites are a replacement of the "desktop" site instead of the native app. It's just accessing Facebook via the browser but with a mobile-friendly UI.

jiggy2011 14y ago
An installed application can potentially do a lot more than a cookie. For example, open files on the filesystem, read text messages & phone numbers and upload these to a third party server and sometimes even modify or install other software. The same issues exist with desktop applications of course, for example various spyware toolbars etc so you always have to make some judgement call. The main difference seems to be that when you access a website on your desktop you are much less likely to get some popup nagging you to download a desktop app to consume the content vs a smartphone app. I guess because most desktops are fast enough that you can get reasonable performance from just HTML5 or flash.
leeoniya 14y ago
1. there's a vast difference between a third party simply tracking which sites i visit vs an app having access to my GPS location, address books, call history, etc.., whenever it pleases. with a web browser, i can "share my location" as i desire...if i want to find nearby restaurants on yelp's mobile site, i'll share my location once. with an app you just say "yes, you have permission to read my gps", you have no control of when or how often it does this. 2. on my desktop, there's no guarantee that any specific info will be in the same place. for example i use thunderbird portable in an encrypted container for my email and contacts. on a phone, your contacts are pretty much in the same place and every app knows how to get to them, there's much less variance. 3. you may have a point, but without a good mobile site, they can coerce people to use the app by providing a shitty experience in the browser, cause an app can get to a lot more of your juicy data which they crave.

kayoone 14y ago

there are alot of apps that are essentially a webview component showing some website and they still send you push notifications etc. (eg. the old HTML5 facebook app) This is not about App-Store vs Web distribution, its about real Apps and their underlying tech.

pjmlp 14y ago

> what web-apps offer me, as a user, is peace of mind in terms of security Are you sure? The browser also has security exploits, being coded in C/C++. With JavaScript you can also do something similar to fork bombs. And lets not forget the plugins as well or the JavaScript APIs to access your data.

leeoniya 14y ago
i would say there's a huge difference between a web browser that happens to have an exploit vs willfully surrendering your own privacy to an app designed to harvest your data. i'll take the former any day of the week.
- pjmlp 14y ago
  You forgot the part about JavaScript APIs to your data.
  - leeoniya 14y ago
    if anything 3rd party asks for permanent access to my data, it's not getting installed. javascript APIs can be configured to ask you every time for permission, in fact that's the default.