News for hackers. Stuff that matters.
Re:"This community is available in the app" by thewhitetulip on Sunday February 16, 2020 @03:09AM (#22340499)
I gave up on read Quora when they forced logins

I will give up on reddit if they do the same.

Isn't visits a valid criteria? Why force a mobile app?

Re:"This community is available in the app" by Freak_NL on Sunday February 16, 2020 @03:24AM (#22340544)
Browsers are agents of the user, apps are agents of the company behind the app.

With a browser the user can install extensions and do things that benefit them, in an app you get exactly what the app owner gives you. If monetization is your only purpose, you would choose apps exclusively if your users are willing to accept it.

Re:"This community is available in the app" by majewsky on Sunday February 16, 2020 @10:27AM (#22341938)
> Browsers are agents of the user

The most-used browsers, too, are agents of the company making them.

Re:"This community is available in the app" by gsich on Sunday February 16, 2020 @10:59AM (#22342090)
Compared to most company apps: yes, they are at least somewhat user focused.
Re:"This community is available in the app" by tobr on Sunday February 16, 2020 @04:02PM (#22343734)
> Browsers are agents of the user, apps are agents of the company behind the app.

Alas, browsers are also apps.

Re:"This community is available in the app" by codedokode on Sunday February 16, 2020 @04:40AM (#22340761)
A website cannot silently read a phone number and list of nearby WiFi access points for geolocation, scan local drive for interesting files, show annoying notifications every hour to return user back to the app.
Re:"This community is available in the app" by andybak on Sunday February 16, 2020 @04:47AM (#22340787)
Neither can an app without the relevant permissions.

Which of those things can the official Reddit app do currently?

If you're saying "the Reddit app will slowly change to do bad things" then say that and don't imply it already does those things.

Re:"This community is available in the app" by clort on Sunday February 16, 2020 @08:21AM (#22341427)
> Which of those things can the official Reddit app do currently?

Looking at https://play.google.com/store/apps/details?id=com.reddit.fro..., scroll down and click the 'View Details' under Permissions. It shows that the app can read your contacts, network connections, approximate location, contents of your USB storage plus much more which would cover all of codedokode's points adequately I think? (I'm not sure of the annoying notifications, perhaps all apps can do that..)

The list in full:

  This app has access to:
  Photos/Media/Files

    read the contents of your USB storage
    modify or delete the contents of your USB storage

  Location

    approximate location (network-based)

  Storage

    read the contents of your USB storage
    modify or delete the contents of your USB storage

  Microphone

    record audio

  Camera
    take pictures and videos

  Contacts

    find accounts on the device

  Device & app history

    read sensitive log data

  Identity

    add or remove accounts
    find accounts on the device

  Other

    receive data from Internet
    view network connections
    prevent device from sleeping
    run at startup
    read Google service configuration
    draw over other apps
    read sync settings
    full network access
    create accounts and set passwords
    use accounts on the device
    toggle sync on and off
    install shortcuts
Re:"This community is available in the app" by JshWright on Sunday February 16, 2020 @08:30AM (#22341458)
Many (though certainly not all) of those things require explicit permission from the user (particularly the storage, location, and camera related stuff).
Re:"This community is available in the app" by thewhitetulip on Sunday February 16, 2020 @09:08AM (#22341590)
When all an app needs to do is connect to a website and cache a few images why does it need microphone access?

Also if it has 100s of dialogs popping up users get a fatigue. They tend to say yes to everything and that's how default Android permissions are

Re:"This community is available in the app" by inerg on Sunday February 16, 2020 @09:44AM (#22341745)
I don't have the app installed but I'm assuming you can record video in it to post on Reddit? If that's the case I can see why it requires access to the microphone. That's the only way I could look at justifying it.
Re:"This community is available in the app" by thewhitetulip on Monday February 17, 2020 @06:02AM (#22346809)
True. But why need all permissions upfront?

Security model should be automated. Request only when needed

Can't see why it needs all permissions upfront. Apps keep nagging u until we provide all permissions.

90% of my reddit usage is posting amd reading text. 10% is photo related. So browser is better for me.

I don't need an app to have all access when I upload photos once a month

Re:"This community is available in the app" by rjzzleep on Sunday February 16, 2020 @10:33AM (#22341967)
The only ones that require user interaction are contacts, location, storage, microphone, camera.

Microphone is granted along camera. Camera is needed if you want to upload photos.(I might be wrong about the microphone)

Storage is always necessary for apps that cache anything from the web.

That leaves contacts and location.

So you can disable contacts and location, but all your metadata including device and network information is read and probably transmitted. In most cases it's good enough as location information as well.

Re:"This community is available in the app" by dreamcompiler on Sunday February 16, 2020 @11:14AM (#22342160)
Even if the user has fine-grained control over these things, the app can just refuse to run until they're granted. I don't know if the reddit app does so, but many do.

This is why users need control over the internal API layer of their phones so they can feed spoofed data to apps.

Re:"This community is available in the app" by JimDabell on Monday February 17, 2020 @08:26AM (#22347492)
> Even if the user has fine-grained control over these things, the app can just refuse to run until they're granted. I don't know if the reddit app does so, but many do.

Perhaps this is the case on Android, but this is explicitly forbidden by Apple:

> (iv) Access Apps must respect the user’s permission settings and not attempt to manipulate, trick, or force people to consent to unnecessary data access. For example, apps that include the ability to post photos to a social network must not also require microphone access before allowing the user to upload photos. Where possible, provide alternative solutions for users who don’t grant consent. For example, if a user declines to share Location, offer the ability to manually enter an address.

https://developer.apple.com/app-store/review/guidelines/#dat...

Re:"This community is available in the app" by labawi on Sunday February 16, 2020 @08:08AM (#22341384)
Let's not kid ourselves about the safety or comprehensiveness of android permissions, or people clicking without reading.

To be clear, I'm not claiming it does those things, but are you claiming it does not? And will not or could not?

Re:"This community is available in the app" by lathiat on Sunday February 16, 2020 @08:22AM (#22341432)
Maybe you should try iOS :-) it’s quite different here honestly. I’m not saying there aren’t holes they’ve had to patch [like recently adding a popup for Bluetooth LE permissions] but they are pretty good at closing them.
Re:"This community is available in the app" by bla3 on Sunday February 16, 2020 @09:12AM (#22341613)
App permissions may be better than on Android, but browser choice just doesn't exist on iOS. So suggesting iOS to people who'd rather use the web page than the app seems a bit strange.
Re:"This community is available in the app" by teh_infallible on Sunday February 16, 2020 @10:00AM (#22341811)
Browser choice does exist on iOS. I use Brave.
Re:"This community is available in the app" by the8472 on Sunday February 16, 2020 @10:08AM (#22341851)
All browsers on iphones are reskinned webkits.
Re:"This community is available in the app" by samatman on Sunday February 16, 2020 @11:51AM (#22342378)
Brave is reskinned Chromium everywhere else, and reskinned Webkit on iOS.

People who use Brave use it for reasons other than access to a unique rendering engine. Many of those reasons apply to the iOS version as well.

Not making a case for Apple's decision here. I'd be happy if Gecko were available on iOS; there's no way I'd burn my battery like that, but competition is good.

But it's not as simple as "there's one browser on iOS" either, the rendering engine is just one part of what makes a browser unique and useful.

Re:"This community is available in the app" by luma on Sunday February 16, 2020 @08:49AM (#22341511)
I don't see how the permissions requested here would be substantially different in IOS. This isn't a matter of the OS, both Android and IOS offer fine-grained controls that are accessible to the user. It's up to the application developer what they request and what they do with it.

I think people are right not to trust Tencent with this kind of access.

Re:"This community is available in the app" by JimDabell on Sunday February 16, 2020 @09:10AM (#22341606)
> both Android and IOS offer fine-grained controls that are accessible to the user.

iOS doesn't allow apps to read the user's phone number or scan local Wi-Fi access points. The only files sandboxed apps can read on iOS are ones created by the app, explicitly passed to the app, or made available by the user, which is also possible on the web.

The only thing mentioned that has the slightest bit of merit is being able to spam push notifications, and this is something that a) requires the user to grant permission, b) is easily disabled by the user if it's annoying, and c) explicitly forbidden by Apple:

> 4.5.3 Do not use Apple Services to spam, phish, or send unsolicited messages to customers, including Game Center, Push Notifications, etc. […]

> 4.5.4 Push Notifications must not be required for the app to function, and should not be used for advertising, promotions, or direct marketing purposes or to send sensitive personal or confidential information. Abuse of these services may result in revocation of your privileges.

Re:"This community is available in the app" by felipelemos on Sunday February 16, 2020 @05:17AM (#22340876)
Digg was once a force in the internet.

Reddit is not exempt from this, no one is.

Re:"This community is available in the app" by naravara on Sunday February 16, 2020 @08:45AM (#22341500)
Reddit was an alternative Digg for them to flee to. I’m not sure what an alternative reddit is. What’s more, the scale of Reddit today blows Digg, in its heyday, completely out of the water. So any transition would take much longer. There’s just too many niche subreddits where they people wouldn’t know where to go. It’s similar to how Facebook has a vice-grip on people because everyone seems to have one group or community that puts notices on the group page.
Re:"This community is available in the app" by terminaljunkid on Sunday February 16, 2020 @07:08AM (#22341176)
Basically I have some toy accounts for those sites, in names that read somewhat like Fortran variables, sans meaning.

Currently using this thing called 33mail. Temp-mail works most times too, but 33mail forwards me the emails so I can even use forgot password option. On a relevant note, there are few websites that provide temporary phone numbers if you're from US/Canada, or in contexts US/Canada temporary phone number helps.

Re:"This community is available in the app" by newscracker on Sunday February 16, 2020 @07:36AM (#22341261)
> I gave up Quota when they forced logins

If you were using it just to read answers, you can still do that with a tiny bit of effort and avoid logging in. Just put a ? at the end of the URL (it’s originally a parameter called “shared”, which would be added as ?shared=1). It will then assume you’re coming from a search engine link and let you in without the login popup.

Re:"This community is available in the app" by acdha on Sunday February 16, 2020 @08:08AM (#22341381)
It’s better to avoid companies like Quora entirely - they have highly SEO-ed but increasingly low quality content and just clicking on the link will tell Google to promote it to other people.

I stopped using it when they started search cloaking and have never had cause to reconsider.

Re:"This community is available in the app" by paulgb on Sunday February 16, 2020 @08:29AM (#22341453)
I wish Google took a harder line against sites that make content available to their scraper that isn't available to the end user. It's one of the things that pushed me over to using DDG. (I'm not sure if DDG takes a more active approach, but I think less energy goes into gaming DDG's algorithm by the SEO-driven companies who do things like this.)
Re:"This community is available in the app" by thewhitetulip on Sunday February 16, 2020 @09:09AM (#22341603)
I use this trick once in a while when only Quora has what I am looking for

But it doesn't work for 2 consequitive requests

Luckily, Quora doesn't have quality content these days, like it used to back in the day when experts wrote answers

Re:"This community is available in the app" by newscracker on Wednesday February 19, 2020 @07:56AM (#22365019)
It always works for me for multiple requests. You have to add the "?" at the end of the link once again and refresh to make that popup go away.
Re:"This community is available in the app" by kianigreycliff on Sunday February 16, 2020 @11:06AM (#22342121)
Just an fyi if you take the slug from any answered quora question and plug it into google you can view the page. They only require login if you are coming from another quora page. It's not convenient and they are certainly slimy but it does allow you to view any question without login.
Re:"This community is available in the app" by duiker101 on Sunday February 16, 2020 @04:02AM (#22340648)
I think the engagement and ad revenue is higher in the mobile app. fewer ad block and more places to put them.