Linked by Thom Holwerda on Tue 10th Jun 2014 19:52 UTC

This system worked fairly well. If an app changed its permission needs, you’d be notified, and could choose whether to accept the update. With the most recent Play Store update, however, users are not told about certain permission changes if they don’t result in the addition of permissions to a new group. Given the sheer breadth of permissions a group now covers, this effectively leaves Android with only 13 permissions. An application can quietly update itself in future, to grant itself access to further permissions within a group, with the user left none the wiser.

Once an app is granted an individual permission within a group, that application has the ability to add any other permissions from the group in a future update, without users being notified of the change.

Oh Google.

Optimist view: Google I/O will bring changes to the permission system wherein the above makes sense. Pessimist view: Google is monumentally stupid.

I'm not an optimist.

Permalink for comment 590481
To read all comments associated with this story, please click here.
It really doesn't matter
by fabrica64 on Wed 11th Jun 2014 00:01 UTC
Member since:

I don't understand the difference of asking for permission when almost any app in Android request almost any kind of access permission and most of the people just give the app access to everything.
I am not an expert in Android and I've used it only few times, but it seems to me it's not so easy to revoke specific permissions to an app, for example blocking Facebook app to see your SMS while allowing to do other tasks.
Overall I find Android permission system not very useful, similar in effectiveness to Windows UAC

Edited 2014-06-11 00:17 UTC

Reply Score: 4