News for hackers. Stuff that matters.

A comment on A popular Bluetooth car battery monitor that siphons up all your location data. Parent comment

Re:A popular Bluetooth car battery monitor that siphons up a... by russdill on Tuesday June 27, 2023 @01:56AM (#36489362)
It's difficult to comprehend what's going on here without it being spelled out because it really is that dumb. For an Android app to connect to BLE devices, it needs the location permission. An Android app with the location permission gets access to gps location. It's not possible to allow an app to connect to a BLE device without also giving the app access to the location API.
[ Parent | on HN ]
Re:A popular Bluetooth car battery monitor that siphons up a... by lultimouomo on Tuesday June 27, 2023 @03:00AM (#36489741)
Again, this is before Android 12 - afterwards the app can declare that it just wants BLE not for location purposes, and not get access to GPS (and apparently certain kind of BLE beacons). Still it's mind boggling that this glaring issue survived so long.
[ Parent | on HN ]