• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Android permissions explained, security tips, and avoiding malware

rjtim said:
Are downloadable apps from Play Store and Samsung Apps generally trustworthy/safe?
Click to expand...

The quick answer is no :) The long answer is - there are some spywares there that are still available on Google Play.

Always check permissions when installing new apps, and check user comments !
 
Hi,

I am not sure if this is the correct place to post but I had my S3 stolen a couple of days ago and wondered if anyone can help - my network Vodafone have blocked the phone but I just wanted to know if anyone can tell me if the thief can still access my content/text messages/e-mails or can he not?

I hadn't yet setup any of the security features!

Thanks to anyone who can advise me!!
 
iPop said:
Hi,

I am not sure if this is the correct place to post but I had my S3 stolen a couple of days ago and wondered if anyone can help - my network Vodafone have blocked the phone but I just wanted to know if anyone can tell me if the thief can still access my content/text messages/e-mails or can he not?

I hadn't yet setup any of the security features!

Thanks to anyone who can advise me!!
Click to expand...

If you had Lookout or AVG on it, you can switch on the GPS remotely and track it.
 
Thanks but I didn't have them setup as only had the phone a few days - i just wondered if they could still access my stuff if they connect it to a PC etc
 
rjtim said:
Are downloadable apps from Play Store and Samsung Apps generally trustworthy/safe?
Click to expand...

No. There are still malwares on Google Play. Always check needed app permissions when you install new app ! It's the best way to protect yourself. One of the latest malwares used another scheme - when you install it, it downloads a separate apk. However you should agree with the permissions of this separate apl in order to install it. So, it's still safe !

If you have permission troubles you can check Anti Spy Mobile Free ot PermissionsDog - they will make analysis of all permissions that are needed by your apps.
 
I am on Page Plus with a verizon phone that will not allow me to delete many of the apps. :mad:

Am I better off updating them,just to insure that I get the latest security updates, even if I don't like the new permissions?
 
Ok, I got my first tablet today, will likely be getting a few apps from Google Play tomorrow, and need some info......

From what I read - when you go to download/install an app you have to give your ok seperately for each permission the apps request, is that right ?

Do most people automatically agree to all the permissions ?

Will the apps work if you don't agree to all the permissions ?

Should there be any real concern when getting apps from legit sources like Goodle Play, Amazon apps, or getjar.com ?
 
GKL said:
Ok, I got my first tablet today, will likely be getting a few apps from Google Play tomorrow, and need some info......

From what I read - when you go to download/install an app you have to give your ok seperately for each permission the apps request, is that right ?

Do most people automatically agree to all the permissions ?

Will the apps work if you don't agree to all the permissions ?

Should there be any real concern when getting apps from legit sources like Goodle Play, Amazon apps, or getjar.com ?
Click to expand...
Yeah, the app needs permission from you before you install and run the app. I don't know if most people do that, but it's always good to read the permissions first and to read the comments and look at the rating before doing so. If you don't agree to the permissions then you can't download the app. I don't think there's much concern, but even with legit sources it's always good to do some research and to raise a brow at fishy apps.
 
GKL said:
Ok, I got my first tablet today, will likely be getting a few apps from Google Play tomorrow, and need some info......

From what I read - when you go to download/install an app you have to give your ok seperately for each permission the apps request, is that right ?

Do most people automatically agree to all the permissions ?

Will the apps work if you don't agree to all the permissions ?

Should there be any real concern when getting apps from legit sources like Goodle Play, Amazon apps, or getjar.com ?
Click to expand...

You cannot grant permissions individually. You either must accept all permissions the app is requesting or not install the app.

I would say that most people do accept the permissions without first reading them the same way most people accept the license agreement on software when installing applications on their PC. Most of the time it's safe enough.

There should always be a concern, but it's very slight. Use common sense with the permissions (if it looks screwy, then you might want something else) and read the reviews on Google Play. Malicious stuff get's called out pretty quickly.

If find an app you want, but aren't sure, ask here. We're here to help. :D
 
Metroid prime said:
Yeah, the app needs permission from you before you install and run the app. I don't know if most people do that, but it's always good to read the permissions first and to read the comments and look at the rating before doing so. If you don't agree to the permissions then you can't download the app. I don't think there's much concern, but even with legit sources it's always good to do some research and to raise a brow at fishy apps.
Click to expand...

lunatic59 said:
You cannot grant permissions individually. You either must accept all permissions the app is requesting or not install the app.

I would say that most people do accept the permissions without first reading them the same way most people accept the license agreement on software when installing applications on their PC. Most of the time it's safe enough.

There should always be a concern, but it's very slight. Use common sense with the permissions (if it looks screwy, then you might want something else) and read the reviews on Google Play. Malicious stuff get's called out pretty quickly.

If find an app you want, but aren't sure, ask here. We're here to help. :D
Click to expand...

Thanks, that good to know that it not something that happens often, but it's safer to err on the side of caution and know what to watch for ! :D
 
Rico ANDROID said:
I would love to know which app you get the new permission? Forgive me if I read ovr it and missed it in the post.

AlostPacket: any insight on this new one? I wonder if some of the lagest upgrades with google , android, etc will start seeing new permissions? What effect will such have on devices still on 2.2?
Click to expand...

Hey Rico ANDROID,

So sorry for the delayed reply- somehow I didn't get the email for the thread, and simultaneously got swallowed whole by work there for awhile! The app I had been looking at was ReLaunch- Launcher by 5primes. Since writing that post I also noticed it in the Google Play Books app (though it being a Google app it doesn't seem as odd there).
 
MiscBec said:
Hey Rico ANDROID,

So sorry for the delayed reply- somehow I didn't get the email for the thread, and simultaneously got swallowed whole by work there for awhile! The app I had been looking at was ReLaunch- Launcher by 5primes. Since writing that post I also noticed it in the Google Play Books app (though it being a Google app it doesn't seem as odd there).
Click to expand...

Hi Misc, no prob at all. Thanks for the info! I will check it out!
 
Handcent SMS:
Keep an eye on it, it uses almost every permission available to ask for

Earth live wallpaper
plasma live wallpaper
Subsrate live wallpaper
flying balls live wallpaper
matrix live wallpaper

ALL Live wallpapers are "safe", save draining your battery - matrix is the worst

AK Notepad - I dont use it

Opera Mini 5 - supreme security risk, man-in-the-middle stuff - UNINSTALL ASAP

Coin Flip - adware, no worse than Angry Birds
 
That depends. Rooted? Then you CAN individually block the permission from being accepted - LBE PRivacy Guard, really really works well.

Caveat for LBE - TURN IT OFF BEFORE UNINSTALLING, otherwise some of the blocked permissions could stay blocked!
 
Great thread, just got finished with it.

In general I will install apps from what I consider to be reputable companies even if their Permission Requests are a little suspect. For apps from unknown developers I rely on comments and a quick Google search.

You definitely do have to wonder though about certain app permissions.

For example, both Dunkin Donuts and Starbucks apps require Call_Phone and Dunkin also requires Read_Contacts, Send_SMS, Write_SMS. I trust both of these companies not to call 900 numbers on my behalf ;) and if Dunkin wants to see my contact list so be it. Having the ability to have my coffee cards scanned from my phone is worth it. However I really start to wonder if some companies are collecting data for not the greatest reasons.

Somebody in an earlier post made a suggestion to allow searching with the ability to uncheck certain permissions. Or else allowing certain permissions to be selected as an extra level of warning. That is the best way to dissuade developers from requesting unnecessary permissions, have it lead to less search results.
 
ks-man said:
Great thread, just got finished with it.

In general I will install apps from what I consider to be reputable companies even if their Permission Requests are a little suspect. For apps from unknown developers I rely on comments and a quick Google search.

You definitely do have to wonder though about certain app permissions.

For example, both Dunkin Donuts and Starbucks apps require Call_Phone and Dunkin also requires Read_Contacts, Send_SMS, Write_SMS. I trust both of these companies not to call 900 numbers on my behalf ;) and if Dunkin wants to see my contact list so be it. Having the ability to have my coffee cards scanned from my phone is worth it. However I really start to wonder if some companies are collecting data for not the greatest reasons.

Somebody in an earlier post made a suggestion to allow searching with the ability to uncheck certain permissions. Or else allowing certain permissions to be selected as an extra level of warning. That is the best way to dissuade developers from requesting unnecessary permissions, have it lead to less search results.
Click to expand...


Well said, and a good idea! I may have to add something like that to PocketPermissions :)

I agree too, that some of those permissions are too "all or nothing" such as the SEND_SMS permission. However I think Google just recently split that into 2 separate permissions. 1 normals SEND_SMS, which requires users confirmation before sending, and another SEND_SMS_NO_CONFIRMATION, which, as it says on the tin, requires no confirmation. This is a step in the right direction.

However, Google tends to have a policy of preferring compatibility to security (in general), which means, that even though they split the permission, the extra protection will take awhile to take effect. Many apps will happily use the older permission and be granted full/no confirmation permission as long as they don't make use of the new SDK.

As for splitting the Contacts permissions, there is already a way for apps to let users pick a contact without the permission. Unfortunately, developers/publishers do not like this experience because it takes the user to the contacts/people app, and out of their app.

From a usability perspective, it should be fine. However many apps prefer to give a user a complete experience without ever leaving their app.
 
You must log in or register to reply here.
Back
Top Bottom