News for hackers. Stuff that matters.
Re:Android permissions and hypocrisy by 0x0 on Monday January 23, 2017 @06:44AM (#13461502)
It's even worse with Universal Clipboard, the feature that seamlessly shares your active clipboard between your mac and iOS devices. I have seen the official Facebook iOS app trigger a "Pasting from <mac-hostname>..." spinner when starting up, because Facebook silently steals your clipboard on startup/resume, and they are probably an API that happens to now possess Universal Clipboard powers and thus are triggering a clipboard content pull from the mac.
Re:Android permissions and hypocrisy by retox on Monday January 23, 2017 @07:41AM (#13461773)
I'm still astonished people on HN trust Facebook enough to have any of their apps installed. Since day one their developers have shown complete disregard for users privacy.
Re:Android permissions and hypocrisy by Diederich on Monday January 23, 2017 @09:35AM (#13462376)
I useful Facebook lightly/moderately, but I uninstalled its app from my phone a long time ago, initially because it was a battery sucking monster, but also because it didn't 'feel' right.

These days, I pretty much don't install apps on my phone. I just use it as an everywhere web browser and live with the web version of various things.

Re:Android permissions and hypocrisy by codazoda on Monday January 23, 2017 @12:09PM (#13463673)
I also use their web app, which means I can no longer access the private messages people send me. Sometimes it tells me I've got a new message. Friends, I'm sorry that I'm ignoring you, but I'm not installing the battery sucking privacy steeling app that is required to view those messages. Wish I could disable the ability for people to send me private messages so they would get a notice instead of thinking I'm an a-hole.
Re:Android permissions and hypocrisy by c22 on Monday January 23, 2017 @01:00PM (#13464208)
I had this problem for awhile. Now I'm using mbasic.facebook.com for a much more functional experience.
Re:Android permissions and hypocrisy by Diederich on Tuesday January 24, 2017 @05:46PM (#13476493)
I will give that a try, thanks!
Re:Android permissions and hypocrisy by dragonwriter on Monday January 23, 2017 @05:33PM (#13466779)
> I also use their web app, which means I can no longer access the private messages people send me.

You could actually do that through the Facebook.com web interface much longer than you could through the FB mobile app. Of course, you can still do it on the web, though it's a separate domain (just as, on mobile, it's a separate app.)

But since they really want you to use the Messenger mobile app, to use the web interface on mobile you have to use "Request desktop site".

Re:Android permissions and hypocrisy by Diederich on Monday January 23, 2017 @05:24PM (#13466707)
Yes, this is the big downside.

My 'SLA' for facebook messages is about 24 hours, and people who send me things there learn that over time. I generally just tell them why I don't see their messages right away.

In general, I make a point of not being too responsive with any online/async notification systems, except for SMS. It's one way I keep myself from being so scattered.

Re:Android permissions and hypocrisy by shalmanese on Tuesday January 24, 2017 @08:40PM (#13477672)
If you go to messenger.com and select Request Desktop Site, you can get a web version of messenger which is tolerably ok to use.
Re:Android permissions and hypocrisy by jdavis703 on Monday January 23, 2017 @09:50AM (#13462503)
Facebook seems to be one of the few apps that gets privacy right, only asking for permissions to certain things (e.g. camera and microphone) when you want to use say a video recording feature. Now what's the general trustworthiness of the company? That's hard to say for sure, but at least they're doing app permissions right.
Re:Android permissions and hypocrisy by evilduck on Monday January 23, 2017 @01:25PM (#13464475)
That's because of how iOS grants camera and mic permissions, not because Facebook did anything right.
Re:Android permissions and hypocrisy by yAak on Monday January 23, 2017 @01:54PM (#13464811)
It's partially Facebook doing it right, but not exactly noteworthy. iOS devs can proactively request permissions whenever, and tell you whatever useless reason they want, but that usually gets users to tap "Don't Allow" (and may get your app rejected by Apple.)
Re:Android permissions and hypocrisy by xenophonf on Monday January 23, 2017 @10:17AM (#13462703)
I didn't really think about it until the iOS Facebook app helped itself to my Christmas morning photos this year. I had assumed that Apple had stronger protections in place for users' content. It's one thing to say in an alert or popup or something "did you take photos of the kids opening presents this morning? want to make a photo collage using our helpful tool?" and quite another to access my photos (and, presumably, other personal data) without prompting.
Re:Android permissions and hypocrisy by 0x0 on Monday January 23, 2017 @11:28AM (#13463326)
You must have granted the app permission to your photos/camera roll earlier. Still I agree it's sneaky for the app to go in uninvited at a later point in time.
Re:Android permissions and hypocrisy by yAak on Monday January 23, 2017 @01:58PM (#13464841)
Agreed. It might be nice if Apple extended their "Do you want to continue allowing XYZ to use Location Services" prompt to other permissions, provided it wasn't too aggressive.
Re:Android permissions and hypocrisy by 0x0 on Monday January 23, 2017 @02:22PM (#13465062)
Or even better, offer a restricted photo access permission that only works with the built-in image picker. Then at least the user has to tap on an image before it is transferred to the app. I don't care about the fancy custom image pickers with real time preview effects that various apps build in.
Re:Android permissions and hypocrisy by iainmerrick on Monday January 23, 2017 @10:54AM (#13463007)
You can deny it access to your photos, under Settings -> Privacy -> Photos.
Re:Android permissions and hypocrisy by rhizome on Monday January 23, 2017 @02:12PM (#13464963)
I uninstalled FB from my phone years ago after all of my FB friends suddenly showed up in my Android Contacts.
Re:Android permissions and hypocrisy by Twisell on Monday January 23, 2017 @09:01AM (#13462177)
I'm very outraged that you are right. Just checked with a dubious app that let you display current clipboard with no user action.

Yet you still have to bring the app to the foreground, but this is potentially a huge privacy leak IMHO.

The "doodle fruit ninja run" game I play don't need to now that my girlfriend left me so they can display a tinder ad...

(Oh, god if an evil ad developer come here don't take this as a good idea)

Re:Android permissions and hypocrisy by ClassyJacket on Monday January 23, 2017 @07:27AM (#13461701)
This is a big problem. If I try to paste something on my iPhone, my iPhone pauses for 5 - 10 seconds while it fetches the clipboard. Plus apps being able to read it with no user action is not acceptable to me. I don't like that Facebook can or that Facebook does read my clipboard to every time I start it up.