News for hackers. Stuff that matters.

A comment on When an app asks for permissions, it should have a “feed fake data” option. Parent comment

Re:When an app asks for permissions, it should have a “feed ... by tobr on Saturday July 08, 2023 @01:33PM (#36646621)
Discussed recently on ATP[1] - this is a huge security hole. If you give access to all photos, apparently the app can search through the EXIF data to extract locations and timestamps, and build up a very accurate timeline of your whereabouts.

1: https://atp.fm/542

[ Parent | on HN ]
Re:When an app asks for permissions, it should have a “feed ... by spacebanana7 on Saturday July 08, 2023 @04:58PM (#36648693)
I wish Apple stripped sensitive metadata from photos by default when interacting with third party apps/sites. The few services that actually need this data could request an additional permission.

As an app developer I don’t want users to send me location metadata with their photos, but there’s no easy way to communicate this to non-technical users.

[ Parent | on HN ]
Re:When an app asks for permissions, it should have a “feed ... by MBCook on Saturday July 08, 2023 @10:39PM (#36650978)
Is it though?

If you want Google Photos to back up your photo library… it needs full access to everything to do that.

Very very few apps should need full photo access. But photo backups/cloud libraries are the one I can think of that do.

I was actually surprised no one on ATP brought that up.

[ Parent | on HN ]
Re:When an app asks for permissions, it should have a “feed ... by saagarjha on Sunday July 09, 2023 @04:51AM (#36652828)
Ok but what if you don’t want to use Google Photos for that?
[ Parent | on HN ]
Re:When an app asks for permissions, it should have a “feed ... by MBCook on Sunday July 09, 2023 @01:37PM (#36656690)
Genuine question: what else does it do? I thought that was all it was for.
[ Parent | on HN ]
Re:When an app asks for permissions, it should have a “feed ... by newaccount74 on Sunday July 09, 2023 @05:28PM (#36659091)
Answered upthread:

> view photos already saved in the cloud

[ Parent | on HN ]