397 liens privés
Google a rechangé la manière dont les permissions sont gérées/notifiées.
Les utilisateurs du playstore n'auront plus besoin d'approuver des mises à jour de permissions individuelles qui appartiennent à un groupe de permission déja accepté. C'est pas clair? Lisez ceci:
"""
Redditor iamtubeman posted a thread where he talks about this further, and demonstrates just how an application with a tiny number of permissions could be used as a gateway into your device with an updated version with much more intrusive permissions. For example, he created an application using:
android.permission.GET_TOP_ACTIVITY_INFO
android.permission.GET_ACCOUNTS
android.permission.ACCESS_COARSE_LOCATION
android.permission.WRITE_CALL_LOG
android.permission.READ_EXTERNAL_STORAGE
android.permission.SUBSCRIBED_FEEDS_WRITE
This was able to be updated to allow the following additional permissions, none of which the user would be explicitly warned about.
android.permission.READ_HISTORY_BOOKMARKS
android.permission.READ_PHONE_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.READ_SMS
android.permission.RECEIVE_MMS
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.WRITE_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_FORMAT_FILESYSTEMS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.SUBSCRIBED_FEEDS_READ
And there you have it. Your app with fairly standard permissions could now (after a small update that says nothing about the permissions) monitor and store your browsing habits, indexed by your IMEI number. Meanwhile, you would be getting tracked by GPS in real time, with your location data being constantly uploaded.
"""
Clap clap clap.. Google. C'est la porte ouverte à toutes les fenêtres ce que tu fais là.
Une raison de plus de supprimer toutes leurs applications dont le playstore et d'utiliser exclusivement celles du repo libre f-droid.
De manière complémentaire, rooter son ordiphone et utiliser X-Privacy, PrivacyGuard ou le gestionnaire de permission apparu dans la 4.3.
Plus de détails sur les permissions "simplifiées" du playstore: https://support.google.com/googleplay/answer/6014972
Thread reddit de iamtubeman: http://www.reddit.com/r/Android/comments/27n7yr/what_latest_changes_to_play_store_app_means_for/