News for hackers. Stuff that matters.

A comment on Android permissions and hypocrisy. Parent comment

Re:Android permissions and hypocrisy by dfox on Monday January 23, 2017 @05:31AM (#13461196)
That would require reliably deciding whether the action was in fact initiated by user, which is hard in browser environment and probably impossible for android.
[ Parent | on HN ]
Re:Android permissions and hypocrisy by poizan42 on Monday January 23, 2017 @08:45AM (#13462091)
The answer to that may actually be quite simple: The keyboard app is the one that should be allowed to read from the clipboard. Now can a keyboard spy on you clipboard contents? Sure. But it can also spy on all your keystrokes, so the trust must already be there.
[ Parent | on HN ]
Re:Android permissions and hypocrisy by dfox on Monday January 23, 2017 @09:22AM (#13462290)
That assumes that clipboard can only contain text, which I'm not sure whether is so on Android, but on all major desktop UI systems clipboard can not only contain arbitrary data, but even allows for negotiation of supported formats between source and destination.
[ Parent | on HN ]