News for hackers. Stuff that matters.
Re:Ask HN: Developer abused “sign in with GitHub”? by itsacomment on Friday December 09, 2022 @07:06AM (#33920374)
See, my first question would be "WHY?!".

Every unnecessary permission is suspicious until proven not to be, and will at the very least be used in ways that I would not, if not even actively to my detriment.

Your android flashlight demanding to read your contacts is trying to scam you ( and worse, your contacts through your negligence), not just ask for some harmless permission you needn't care about.

Re:Ask HN: Developer abused “sign in with GitHub”? by anon84873628 on Friday December 09, 2022 @10:39AM (#33922450)
Hence why the Google Play store reviews app permissions requests, just like Google OAuth app registration does, and just like GitHub could do...