News for hackers. Stuff that matters.
Re:Tell HN: Dropbox now requires access to contacts for Goog... by dmd on Friday January 15, 2021 @08:28AM (#25790690)
... isn't that exactly what access to storage does? Do any (mobile) platforms give access to NON sandboxed storage?
Re:Tell HN: Dropbox now requires access to contacts for Goog... by Hizonner on Friday January 15, 2021 @08:39AM (#25790785)
All apps get sandboxed storage without even asking. On Android at least, permission for "storage" means permission for an area shared between all apps. And a lot of apps dump stuff into it that you do not necessarily want every other app to have access to.

It's always been that way.

What it really needs is some kind of compartments, so that you can share storage between X and Y, and between Z and W, but not between X and W.

Re:Tell HN: Dropbox now requires access to contacts for Goog... by ascar on Friday January 15, 2021 @10:32AM (#25792048)
I just installed Signal two days ago and enabled backups.

This asked, understandably, for storage permission. This prompted me to give access to the sdcard, however, I had the option to select a single folder (or actually directly creating it within the prompt) that the app will have access to. I.e. Signal now has access to sdcard/signalbackups/ but not to the whole sdcard. (unless this whole new permission process wasn't Android but the Signal app. I rarely download apps and have to give storage permissions).

This used to be different, but times of giving access to full internal or external sdcards are over. Unfortunately though, the UX isn't perfect. I felt like I needed to know that I only want to give it access to a part of the sdcard and actively look that this is indeed possible. But that might be my bias from previous usage talking.

Re:Tell HN: Dropbox now requires access to contacts for Goog... by Ensorceled on Friday January 15, 2021 @08:37AM (#25790771)
No, sandboxed means restricted to that application. Apps need permissions to access data outside of their sandbox. They are suggesting that there be another sandboxed storage for apps that pretends to be read data.