4 ms·

https://play.google.com/store/apps/details?id=com.facebook.katana https://play.google.com/store/apps/details?id=com.facebook.k... The permissions include: Dev

by EwanToo 11y ago

https://play.google.com/store/apps/details?id=com.facebook.katana https://play.google.com/store/apps/details?id=com.facebook.k... The permissions include: Device ID & call information read phone status and identity From: https://support.google.com/googleplay/answer/6014972?hl=en https://support.google.com/googleplay/answer/6014972?hl=en Device ID & call information An app can access your device ID(s), phone number, whether you're on the phone, and the number connected by a call. Device ID & call information may include the ability to read phone status and identity.

xxs 11y ago
Regardless what google policy says: the way to get the phone number is via: TelephonyManager.getLine1Number()[1] Which returns "null" unless the operator actually stores the phone number in the SIM so it can be read from there (also it can be modified to be anything). While technically possible, I have not seen it in practice for long time (since 2010 or so). On iPhone it's not possible for an application to obtain the phone number[2]. There was a semi-hack doing so and Apple rejected the applications off the store and closed the loop. (reading SBFormattedPhoneNumber)[3]. In 2013 there was another exploit to obtain it but it has been addressed as well. [1]: http://developer.android.com/reference/android/telephony/TelephonyManager.html http://developer.android.com/reference/android/telephony/Tel... [2]: https://www.google.com/?gws_rd=cr,ssl&ei=GNa4Vc3ODuxxxxrQCg#q=for+security+reasons%2C+iPhone+OS+restricts+an+application https://www.google.com/?gws_rd=cr,ssl&ei=GNa4Vc3ODuxxxxrQCg#... --it's google search with the reject terms [3]: https://www.cocoanetics.com/2009/11/forbidden-fruit-apple-apis/ https://www.cocoanetics.com/2009/11/forbidden-fruit-apple-ap...
- EwanToo 11y ago
  Some network providers don't write the phone number to the SIM, plenty of others do.
  - xxs 11y ago
    Well that may be, yet back in 2011 the application the company I worked for required sms verification (to prohibit multiple accounts) and the idea was to prefill the phone number reading that field. It totally didn't work and there were entries like '<unknown>' instead of null, etc. The application required Android 2.2 (iirc). The functionality was removed. Personally I have not seen an EU provider storing a real phone number there.

by EwanToo 11y ago

xxs 11y ago

Regardless what google policy says: the way to get the phone number is via: TelephonyManager.getLine1Number()[1] Which returns "null" unless the operator actually stores the phone number in the SIM so it can be read from there (also it can be modified to be anything). While technically possible, I have not seen it in practice for long time (since 2010 or so). On iPhone it's not possible for an application to obtain the phone number[2]. There was a semi-hack doing so and Apple rejected the applications off the store and closed the loop. (reading SBFormattedPhoneNumber)[3]. In 2013 there was another exploit to obtain it but it has been addressed as well. [1]: http://developer.android.com/reference/android/telephony/TelephonyManager.html http://developer.android.com/reference/android/telephony/Tel... [2]: https://www.google.com/?gws_rd=cr,ssl&ei=GNa4Vc3ODuxxxxrQCg#q=for+security+reasons%2C+iPhone+OS+restricts+an+application https://www.google.com/?gws_rd=cr,ssl&ei=GNa4Vc3ODuxxxxrQCg#... --it's google search with the reject terms [3]: https://www.cocoanetics.com/2009/11/forbidden-fruit-apple-apis/ https://www.cocoanetics.com/2009/11/forbidden-fruit-apple-ap...

EwanToo 11y ago
Some network providers don't write the phone number to the SIM, plenty of others do.
- xxs 11y ago
  Well that may be, yet back in 2011 the application the company I worked for required sms verification (to prohibit multiple accounts) and the idea was to prefill the phone number reading that field. It totally didn't work and there were entries like '<unknown>' instead of null, etc. The application required Android 2.2 (iirc). The functionality was removed. Personally I have not seen an EU provider storing a real phone number there.