use cyanogenmod + privacy mode, you can disable what the app can do. for example, you can disable that. app still works, it just gets an empty sms list.

This feature is nowadays called Privacy Guard and it works so well that I have it on by default for all apps. With the exception of apps that actually need to read my contacts (say WhatsApp), I have not had to disable it for any applications and haven't seen any complications. For example Facebook and Twitter apps, which require a whole rainbow of permissions, function just the way they used to. I've never made a lot of use of their location dependent features though and would expect those to suffer from being deprived of GPS data.

I haven't got round to rooting my droid yet, but my plan is to always tell facebook/twitter/google+ that my current position is directly under the moon/iss/some other satilite. Or maybe I'll trace out "Hello FB" on the Atlantic ocean.

That so needs to be a thing.

Though I don't think I'd be tracing out "Hello". Unless you speak Bronx.

This sounds excellent, I can't believe I never tried it yet! Of course, this should be part of core Android, but I guess there is no hope for that (given that Google makes its dough on advertising).

It used to be, called App Ops. It was in for (one?) point release before google promptly withdrew it again after realising that giving people tools to protect their privacy goes against their mission.

According to Google [1], it was never meant to ship at that point as it was not ready for general public. There was some compatibility problems with many applications, so that is somewhat believable.

[1] http://www.dailytech.com/Google+Removes+App+Ops+Privacy+Cont...

Of course, they have to spin it some way, because they're years past the point they could be honest and believed. I think it's more likely one google engineer wanted to resist the constant invasion of privacy and likely ended up paying with his job.

App Ops throws SecurityExceptions when you try to access a permission, it doesn't return empty data. You can imagine that most apps didn't build exception handling into the feature access that is required in the manifest at install time. That is the primary reason why it is not a fully public feature for users.

"more likely one google engineer wanted to resist the constant invasion of privacy"

One engineer can't launch a product alone. Just isn't possible unless its under a personal name.

"and likely ended up paying with his job."

0% chance.

They didn't really withdraw it, they just hid it better. I downloaded App Ops X and it still works fine on 4.4.whatever.

App Ops X can only work with root on 4.4.x. In 4.3 it could expose the hidden options to the user without additional permissions.

Ah, I didn't know it needed root, I guess I root everything so I never noticed. Too bad.

To clarify, it doesn't need root on 4.4, it needs root on 4.4.2.

Do you have a link to the google play store? I tried to find it and couldn't. I would love to download it.

I think this is it: https://play.google.com/store/apps/details?id=com.colortiger...

Yep, that's the one!

Thanks!

If that we're true why don't they remove the AdBlock extension from he Chrome store? What good are targeted Ads if those Ads are blocked anyway?

This one is pretty simple, actually. They do obscure AdBlock from the store — if listed in order of popularity instead of being somewhat curated, it’d be at the top of the page. But to your point, imagine they did remove AdBlock from the store. Nerds would stop using Chrome. (Assuming it was not fairly straightforward to install from another source, as is increasingly true.) And we nerds tell our friends and family what browser they should be using. It’d hurt the overall popularity of the browser.

Also, it’s better for Chrome’s security reputation to allow AdBlock from within their store than to allow it from a third-party site. You don’t want to train users that it’s OK to install extensions with broad permissions from anywhere but the Chrome store!

It may become the case in the future that they re-evaluate these priorities, of course.

Unfortunately, Cyanogenmod's Privacy Guard does not block everything (e.g. your IMEI is still readable if permission READ_PHONE_STATE is granted). XPrivacy can help in this case, but its UI is quite convoluted.

Sure would be nice if someone would jailbreak the iPhone, so we could have these sorts of options in our little walled-gardens too.

Funny you say that, because iOS already has all these little options. What's better, apps still get installed and users don't have to make this decision upfront. When permission is required for the first time, dialog box pops up, and then you can refuse each permission individually - i.e. you can give Facebook access to location so you can check in, but block access to contacts.

Can't you already disable access to Contact, Calendar, Reminders, location, etc per app on the iPhone?

It's not without its own faults (and it used to have some huge gaps, such as address book access), but the iOS privacy model is simply a more user-centered paradigm than on Android.

Android apps ask you if you want to update to the new version or stick with the old one indefinitely; privacy settings are non-negotiable. iOS apps ask you as they go: If iOS had an SMS API, Facebook wouldn't need to ask you until you enabled two-factor authentication (assuming that's all they use it for). And you could turn it back off later if you weren't comfortable leaving it on.

Yes. And of course no app can read your text messages in the first place there.

Well, they could read all that other stuff by default with no warning previously until all sorts of apps abused it. Then Apple had to add in the prompts for things like reading Contacts. I'd imagine the Android devs are working on similar since the list of permissions model is breaking down.

Yes you can.

Welcome to two major iOS versions ago. iOS already has privacy controls. Check out Settings->Privacy.

The iphone has had fine-grained privacy before App Ops was released and then removed, and I also think before CyanogenMod had Privacy Guard. One of the few good things about the platform.

You don't need to. Apps can't read SMS and for the rest: You get asked for everything and can deny it.

On Android it's all or nothing.

Are you sure that you have an iPhone?

or MIUI that comes directly with the privacy feature.

I uninstalled the app and put a bookmark to the mobile site on my homescreen instead (like the old days before app stores). It's slightly slower, but on a Nexus 4, it's still fast enough I don't mind. They've improved the mobile interface since the early iPhone days.

This FB app is what you're looking for: https://play.google.com/store/apps/details?id=com.danvelazco...

What's the difference with using a browser bookmark?

It has menu options to go directly to your news feed, the top of the page, notifications and preferences, so it makes browsing the mobile page easier. It also saves the facebook cookies so you don't have to type your user and password every time you want log in.

I remember that a couple of years ago the mobile website was actually noticeably faster than the app, at least on iOS, and gave you access to more features. Back then I kept the app around just to upload photos, but used the mobile site for everything else.

I am not a Facebook app user since closed my account years ago so maybe not the best person to comment but... I have never understood why one needs an app to view a website? Facebook has a mobile site that works yes?

The app can push notifications to your phone, which is nice for regular users, and it can merge with contacts to fill in blank pictures and provide more information. It's not essential, but some of the integration is nice.

If I every get Facebook notifications on my mobile phone you are authorized to shot me in the head...

Some of my friends prefer FB message to SMS for some reason or another, and use it accordingly, so push is nice for that purpose.

I've started using FB messaging - I live in New York, in a basement, and frequently hang out in places with plenty of Wifi, but zero cell signal.

In that situation, I cannot send or receive SMS messages, but FB, etc., work just fine.

I use FB message to communicate with friends in other countries. I know there are other apps out there for it, but when we all have Facebook already, its easier that way.

<shameless plug>

You can use my Facebook client, which definitely doesn't read your text messages, emails and calendar.

Link: https://play.google.com/store/apps/details?id=com.flipster&h...

</shameless plug>

>which definitely doesn't read your text messages, emails and calendar

Does this constitute a privacy policy?

Well, you don't have to trust me or some privacy policy.

On Android you can see for yourself whether an app tries to access data such as text messages, emails or calendar.

My app doesn't ask for those permissions, therefore it can't access that data.

That was a joke.

Sorry, didn't get that, English isn't my native language.

Yeah, I get that a lot.

> Is there no meaningful way to push back against Facebook for demanding this permission?

I think "not using the app" is the most meaningful way, really.

Alternatively, spoof its private data hose and flood Facebook with garbage data, but I presume that's illegal.

I don't see how. They're accessing data on your phone, you aren't exactly cracking their databases and modifying stuff.

Shame on Google for not allowing users to take better control over their apps and privacy. They almost did it in Android 4.3, and then took it back in 4.4, when they realized people might actually use it.

Or, you know, because it was 1) a hidden debugging menu and 2) lacking functionally.

If you have a Samsung Android phone, there's a Permissions Manager that allows you to firewall what apps can and can't do.

Same as Cyanogenmod without having to root your phone.

No there isn't.

I think he's referring to this - https://play.google.com/store/apps/details?id=com.appaholics...

Yes there is. It's called "Permissions Manager" and is available through the Samsung app store.

What a constructive comment!

Correcting factual errors is constructive. The post implied that all you need is a Samsung Phone, then you have "Permissions Manager". No mention of an app. But then, when you look at the reviews for the app that is linked above, it doesn't give one a lot of confidence in managing permissions on Android.

You can use the mobile web page for Facebook.

Less intrusive, less privacy issues.

And it probably works better than the app.

This is my preferred solution for the times I have to unavoidably use Facebook: https://play.google.com/store/apps/details?id=com.danvelazco...

I love this app; I've been using it for years now. Never having to login to FB in the actual browser is a real boon; it's great at sandboxing their cookies.

I just haven't updated facebook. I'm sure it's not great for security.

Their mobile website is serviceable.