Like in title. Modern Android permission system is really annoying. It assumes I do not trust installed apps and I believe was made to promote loose installing of whatever crap like loyalty cards apps, while I only install a couple of trusted apps all from F-Droid. Such module would enable faster installation of the systems and less irritation when I have to give app a permission third time this month (Android now can decide for myself and revoke permission when it thinks it’s no longer needed…).

  • db2@lemmy.worldEnglish
    9·
    10 months ago

    You don’t want Android then it sounds like. As for the permission revocation thing, just turn it off. 🙄

    • henfredemars@infosec.pubEnglish
      3·
      10 months ago

      I’m sure AOSP could be patched to disable checks, but I think Android has different goals than the user in this case.

    • smileyheadOPEnglish
      19·
      10 months ago

      Android is unfortunately the only stable option for mobile OS now.

      As for the permission revocation thing, just turn it off. 🙄 As far as I know there is still no global switch for that?

      • db2@lemmy.worldEnglish
        3·
        10 months ago

        Weird, can’t get to it. I know I’ve seen a toggle to turn that behavior off though. Maybe next time it does it open the notification and it’ll be in there?

    • smileyheadOPEnglish
      26·
      10 months ago

      Can you give me any example scenario of the attack?

      • henfredemars@infosec.pubEnglish
        3·
        10 months ago

        A browser app is compromised via a JavaScript engine flaw and now has permission to install packages.

        • smileyheadOPEnglish
          1·
          10 months ago

          This permissions I have on for my browser anyway, also I still need to click “install” on the popup here regardless of permission switch. And with my idea I was thinking about normal permissions, not special ones.

          • henfredemars@infosec.pubEnglish
            2·
            10 months ago

            This is easily bypassed by using the accessibility API which an all-permitted app can use to automatically handle dialogs.

            But yes, if you’re thinking some permissions are more special than others, it would depend on what permissions you are enforcing.

      • eatham 🇭🇲@aussie.zoneEnglish
        1·
        10 months ago

        You accidentally download malware and instead of you denying permissions it shouldn’t have it has them automatically.

    • smileyheadOPEnglish
      23·
      10 months ago

      Is there a global switch? I only have the option for disabling this for every app separatly.

      • eatham 🇭🇲@aussie.zoneEnglish
        1·
        10 months ago

        There isn’t, but you only need it for apps you use like once a year otherwise it doesn’t remove permissions.