News for hackers. Stuff that matters.

A comment on More than 1k Android apps harvest data even after you deny permissions. Parent comment

Re:More than 1k Android apps harvest data even after you den... by Ajedi32 on Monday July 08, 2019 @03:38PM (#20386014)
It seems like at least some of these apps might be using these vulnerabilities without even being aware of it, as the offending code is in third party libraries. Game devs grabbing mac addresses via Unity's API, for example, may not know that that information is supposed to be restricted on Android.
[ Parent | on HN ]
Re:More than 1k Android apps harvest data even after you den... by krageon on Tuesday July 09, 2019 @04:45AM (#20389971)
Who cares how accidental it was? If you don't vet what happens in your application and why, you have no right to put it on someone else's computer.
[ Parent | on HN ]
Re:More than 1k Android apps harvest data even after you den... by droithomme on Tuesday July 09, 2019 @02:07AM (#20389354)
> some of these apps might be using these vulnerabilities without even being aware of it, as the offending code is in third party libraries

I'll assume by vulnerabilities you meant to say exploits. Given that: True but so what. This is criminal behavior. Using criminal libraries makes you complicit and a co-conspirator.

[ Parent | on HN ]
Re:More than 1k Android apps harvest data even after you den... by chopin on Tuesday July 09, 2019 @03:58AM (#20389788)
Vet your dependencies. I have no mercy for people who put crap on my phone.
[ Parent | on HN ]
Re:More than 1k Android apps harvest data even after you den... by Avamander on Monday July 08, 2019 @05:03PM (#20386735)
Some might be using them without being aware of but the rest can be nicely permabanned.
[ Parent | on HN ]
Re:More than 1k Android apps harvest data even after you den... by mandelbrotwurst on Monday July 08, 2019 @08:08PM (#20387895)
How would you go about reliably and efficiently determining which category each falls into?
[ Parent | on HN ]
Re:More than 1k Android apps harvest data even after you den... by Avamander on Monday July 08, 2019 @08:54PM (#20388101)
They aren't reliably determining violations of current absurd rules and people's apps get hit all the time for no good reason, so basically they could just continue doing what they've done so far.
[ Parent | on HN ]
Re:More than 1k Android apps harvest data even after you den... by droithomme on Tuesday July 09, 2019 @02:08AM (#20389361)
If you use a library that engages in criminal activity, you are legitimately a criminal as well and should be held accountable.
[ Parent | on HN ]
Re:More than 1k Android apps harvest data even after you den... by salamander014 on Tuesday July 09, 2019 @02:21PM (#20395004)
If these apps get banned because they use poor dependencies, maybe better dependencies will become popular, and developers will also have a reason to be more aware of what code they are using.
[ Parent | on HN ]
Re:More than 1k Android apps harvest data even after you den... by Xelbair on Tuesday July 09, 2019 @04:29AM (#20389904)
And that excuses them how?

Ignorantia legis non excusat

[ Parent | on HN ]