News for hackers. Stuff that matters.
Re:Beware of ads that use inaudible sound to link your phone... by danepowell on Friday November 13, 2015 @05:57PM (#10562951)
This is why on-demand permissions are one of the best features of Android 6.0. Don't want Netflix to access your microphone? No problem--don't let it.
Re:Beware of ads that use inaudible sound to link your phone... by lucb1e on Friday November 13, 2015 @06:53PM (#10563361)
Got this via Cyanogenmod already on 4.4 and I use it all the time.

Not just for permissions by the way, Privacy Guard can also prevent wake locks and auto start permissions. That's a serious battery life saver.

Re:Beware of ads that use inaudible sound to link your phone... by eklavya on Saturday November 14, 2015 @12:27PM (#10566430)
I used to believe that and installed CM 12.1 on my phone only to find out that the restrictions don't really work. Whatsapp was able to read my messages (automatic phone verify) when I had disabled the access. Digging around I found out this is the case even with XPrivacy (there are open issues on github) which is supposed to be more extensive. There are some situations when the blocks aren't enforced at all (like some native calls). I got a nexus 5x, android 6 permissions feature actually works.
Re:Beware of ads that use inaudible sound to link your phone... by kachnuv_ocasek on Saturday November 14, 2015 @03:19AM (#10564933)
I use this extensively myself, but the one problem that I'm facing is that it makes some applications unstable. Usually, I just uninstall them as I'd rather sacrifice my comfort than my security and privacy.
Re:Beware of ads that use inaudible sound to link your phone... by barbs on Saturday November 14, 2015 @12:11AM (#10564566)
Thanks for this, I didn't realise you could do this in CM. You can also check when the permissions were being used. For the Netflix app I noticed the "record audio" permission had never been used, but I've set it to explicitly ask me if it tries to use it.
Re:Beware of ads that use inaudible sound to link your phone... by modeless on Saturday November 14, 2015 @03:41AM (#10564979)
Android 6.0 does those things for you too. (Doze and App Standby)
Re:Beware of ads that use inaudible sound to link your phone... by conceit on Sunday November 15, 2015 @03:59AM (#10568990)
sounds like cm is used as a testing channel for new features.
Re:Beware of ads that use inaudible sound to link your phone... by tgb on Friday November 13, 2015 @06:06PM (#10563008)
Does it also allow a "popup request for each use" option? Seems like the right option for the Netflix hotline support feature.
Re:Beware of ads that use inaudible sound to link your phone... by aiiane on Friday November 13, 2015 @06:44PM (#10563289)
No, but you can go into the phone settings and re-enable a permission for an app if you change your mind.
Re:Beware of ads that use inaudible sound to link your phone... by pki on Friday November 13, 2015 @10:52PM (#10564360)
Aren't privacyguard's actions Ask / Never / Always?
Re:Beware of ads that use inaudible sound to link your phone... by andrewaylett on Saturday November 14, 2015 @04:45AM (#10565111)
Most of them, yes. There are a couple that are just on/off, like wake locks.
Re:Beware of ads that use inaudible sound to link your phone... by digi_owl on Saturday November 14, 2015 @02:02AM (#10564792)
Just sad that Google has lumped the permissions into categories, and also put a bunch of them into "safe".

Yeah yeah, clueless aunt Tillie will flip something and complain that its broken. But persisting this way means that you (Google and anyone agreeing with their stance) are breeding whole generations of Tillies.

Re:Beware of ads that use inaudible sound to link your phone... by emsy on Saturday November 14, 2015 @04:11AM (#10565047)
iOS has this for years without a problem, so Google has to find a better reason why they screwed this up for so long.
Re:Beware of ads that use inaudible sound to link your phone... by nitrogen on Saturday November 14, 2015 @12:41PM (#10566491)
And before iOS, J2ME phones had very fine-grained permissions (though it was usually the carrier that controlled them).
Re:Beware of ads that use inaudible sound to link your phone... by digi_owl on Sunday November 15, 2015 @03:42AM (#10568961)
Depends on where in the world you lived...
Re:Beware of ads that use inaudible sound to link your phone... by mtgx on Saturday November 14, 2015 @02:36AM (#10564868)
Indeed. Six categories seems like a pretty small number.
Re:Beware of ads that use inaudible sound to link your phone... by gedrap on Saturday November 14, 2015 @01:04PM (#10566563)
FirefoxOS (I was using v1.3, not sure about earlier or later versions) did the same, it was pretty neat. It's really nice that they are doing it from the very early days, not waiting for their app marketplace to become bigger.
Re:Beware of ads that use inaudible sound to link your phone... by maccard on Friday November 13, 2015 @06:06PM (#10563009)
And remember. iOS has had this since its inception
Re:Beware of ads that use inaudible sound to link your phone... by JohnTHaller on Friday November 13, 2015 @06:23PM (#10563099)
No, it didn't. iOS originally gave apps access to just about everything except background execution without any warning. At the time Android had the superior permissions model, with each app telling you what it needed at install and you being in control of whether or not you wanted to install it with that information. Older iOS apps had access to your photos, your contacts, and other stuff and could use it with no warning to you.

As a result of early privacy breaches, later releases of iOS added per-function permissions on demand, leap-frogging Android in terms of permissions functionality. Android has had some level of per-function permissions on demand in the works since Android 4.4 -- and you could use it in unofficial Android builds like CyanogenMod by turning off individual permissions for apps -- but the feature only finally made it into official builds in Android 6.0. It also got it properly in the API and manifest of apps as well so they can ask permissions as they need them... like the Facebook app needing access to your photos when you select to attach a photo to a post.

Re:Beware of ads that use inaudible sound to link your phone... by fredrik-j on Saturday November 14, 2015 @04:09AM (#10565041)
I have to add that the Facebook app does not have to have or ask for any permission at all to let the user pick an image to publish in their stream. It can use Android Intents to delegate to the user's choice of image picker app to do that[0].

The Intent system[1] is the real ingenuity of the original Android platform. I wish it was used more. Unfortunately most apps choose to implement things like picking an image or an address from the address book in their own code instead - thus more or less forcing the user to submit excessive permissions to the app to get anything done - rather than using the intent system.

The 6.0 on demand permissions may be a decent step forward from the old way of forcing the user to hand over all permissions at install time. Even better would be if the user could indicate to the app that it should use an intent based solution instead requesting a certain permission.

Obviously there are exceptions to this, some tasks require permissions and cannot be resolved with intents.

[0] http://stackoverflow.com/questions/5309190/android-pick-imag... [1] https://developer.android.com/guide/components/intents-filte...

Re:Beware of ads that use inaudible sound to link your phone... by threeseed on Saturday November 14, 2015 @02:14AM (#10564828)
Apple started adding location services permissions 5 years ago. Android 6.0 has only just been released.

Whichever way you look at it it's pretty unacceptable that it's taken so long for Android to implement this.

Re:Beware of ads that use inaudible sound to link your phone... by yareally on Saturday November 14, 2015 @03:12AM (#10564922)
> "Apple started adding location services permissions 5 years ago. Android 6.0 has only just been released".

Location permissions have been in Android since the version 1.0 of the API.

http://developer.android.com/reference/android/Manifest.perm...

Re:Beware of ads that use inaudible sound to link your phone... by threeseed on Saturday November 14, 2015 @03:49AM (#10565004)
But that is the permissions that only appear when you download the app from the store.

I am talking about the API permissions e.g. "the dialog box that pops up confirming you want to allow this app to read your location".

That is the point of this whole discussion right ?

Re:Beware of ads that use inaudible sound to link your phone... by geofft on Friday November 13, 2015 @07:12PM (#10563474)
As of iOS 5, contacts were stored in a world-writable SQLite database. An app that corrupted this database would break contacts for all apps, causing some apps to crash or misbehave, and no permissions were required. (I ran across this on my personal iPad on an app I was developing, after a fit of overconfidence regarding SQLite encryption and whitelisting vs. blacklisting.)
Re:Beware of ads that use inaudible sound to link your phone... by rogerbinns on Friday November 13, 2015 @06:17PM (#10563070)
BlackBerry had it too. There was a tree of permissions (broad categories at the top, specifics in the leaves) and you could set permissions to deny, allow or ask each time.
Re:Beware of ads that use inaudible sound to link your phone... by kalleboo on Friday November 13, 2015 @06:25PM (#10563132)
And remember. Java/J2ME phones had this since their inception.
Re:Beware of ads that use inaudible sound to link your phone... by xnzakg on Friday November 13, 2015 @07:09PM (#10563452)
Java phones even supported asking for internet access... which is pretty much taken for granted now, and GPlay doesn't even show that an app needs it.
Re:Beware of ads that use inaudible sound to link your phone... by barrkel on Saturday November 14, 2015 @02:22AM (#10564849)
If you could deny access to an application with no good intrinsic reason to go online (eg single player game) then you would probably block ads too, and that's not in Google's interest.
Re:Beware of ads that use inaudible sound to link your phone... by ATsch on Saturday November 14, 2015 @05:52AM (#10565250)
For HTTP requests, yes. Using sockets requires the "Full network permissions" permission.
Re:Beware of ads that use inaudible sound to link your phone... by tormeh on Friday November 13, 2015 @09:40PM (#10564172)
I was behind the curve on smartphones for a long time. Luckily my dumbphone had 3G and Java, so I had Google Maps and Facebook on my dumbphone... with multitasking! Slow as hell, but the dumbphone=>smartphone transition was more gradual than most people realize - It was mostly about better UI and hardware; the basic software was already there.
Re:Beware of ads that use inaudible sound to link your phone... by digi_owl on Saturday November 14, 2015 @02:07AM (#10564806)
Frankly many "dumbphones" could rival iPhone when it launched, yet the press went gaga about smartphone for the masses (because Apple made it, natch).

The basic problem was that USA was lagging the mobile world severely, so when the likes of iPhone shipped over there it seemed like a revolution for that insular market. I just wish the wider (tech) press didn't so much unquestionably parrot the US press.

Re:Beware of ads that use inaudible sound to link your phone... by masklinn on Saturday November 14, 2015 @08:27AM (#10565581)
> Frankly many "dumbphones" could rival iPhone when it launched

Did you live through these? I used most of the pre-iPhone Nokia S40 smartphones and owned a few of them, both "consumer" N-series and "professional" E-series. They only rivaled iphones in the checkbox sense: features were technically present on the phone, anything beyond that was missing, the hardware was usually insufficient, the software was garbage on both usability and performances, the overall experience was utterly miserable. After I finally switched from my E70 to a 3G the only thing I wondered is why I hadn't switched earlier (answer being I didn't want to lose the checkbox of 3G support, never mind that I'd have had more utility from 2G on an iphone than I did from 3G on an E70).

And dumbphones didn't come close (dumbphones were what non-corp US users used).

Re:Beware of ads that use inaudible sound to link your phone... by digi_owl on Sunday November 15, 2015 @03:42AM (#10568960)
Still own a SE C702, and it has served me well.
Re:Beware of ads that use inaudible sound to link your phone... by eropple on Saturday November 14, 2015 @03:28AM (#10564953)
> because Apple made it, natch

Or because it just plain felt better to use and was available on a heretofore unprecedented scale among people who shape public opinion. But that doesn't allow one to impute some kind of invalidity to the occurrence, does it?

Re:Beware of ads that use inaudible sound to link your phone... by duaneb on Saturday November 14, 2015 @03:54AM (#10565012)
I mean any phone can rival the iphone. It's also not hard to see that the mobile browsers at the time were utterly miserable to use. Touch was only a part of it.
Re:Beware of ads that use inaudible sound to link your phone... by SixSigma on Saturday November 14, 2015 @03:03AM (#10564908)
People quickly forget that the iPhone didn't have the appstore at launch. It was an ipod with browser, maps, email, sms and a phone.

I think the real innovation was the data contract, getting a decent data allowance for other phones was for Rockerfella.

Re:Beware of ads that use inaudible sound to link your phone... by Eldarrion on Friday November 13, 2015 @06:24PM (#10563121)
And then they waited until 3GS to have multimedia messaging. Let's not argue the benefits of one OS over another and derail the discussion into a fan service announcement.
Re:Beware of ads that use inaudible sound to link your phone... by digi_owl on Saturday November 14, 2015 @02:09AM (#10564815)
And today will silently redirect messaging onto their own system, that will swallow any incoming messages if you ever dear leave their ecosystem. I really really wish they had never gotten into the phone business.
Re:Beware of ads that use inaudible sound to link your phone... by voltagex_ on Saturday November 14, 2015 @02:48AM (#10564887)
I dislike some of Apple's actions too, but let's remain factual. http://arstechnica.com/apple/2014/11/new-apple-support-page-...