• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Confused over app permissions

DH59

DH59

Lurker
I've just entered the smartphone world with a Samsung Galaxy Ace, and wanted to download a QR code reader app. I then read something about app permissions and I looked at what certain QR apps were requiring, which quite frankly scared the living daylights out of me!!

I have read the very useful sticky post on permissions, but I am still confused. I am doing my best to understand why the app would need a certain permission, but as a newbie this is not easy. Why, for instance, would a QR code reader need to access the contact data on my phone, and prevent my phone from going to sleep? Allowing the app to take pictures makes sense, but I presume this is only when I am reading a QR code with the camera, and not at any time as decided by the app!!

Thanks for any help and advice.

Diane
 
DH59 said:
I've just entered the smartphone world with a Samsung Galaxy Ace, and wanted to download a QR code reader app. I then read something about app permissions and I looked at what certain QR apps were requiring, which quite frankly scared the living daylights out of me!!

I have read the very useful sticky post on permissions, but I am still confused. I am doing my best to understand why the app would need a certain permission, but as a newbie this is not easy. Why, for instance, would a QR code reader need to access the contact data on my phone, and prevent my phone from going to sleep? Allowing the app to take pictures makes sense, but I presume this is only when I am reading a QR code with the camera, and not at any time as decided by the app!!

Thanks for any help and advice.

Diane
Click to expand...


Which QR reading app?
 
euph_22 said:
Which QR reading app?
Click to expand...

I've looked at a few, and all seem to need quite a few strange (to me) permissions, but the permissions above are required for QR Barcode Scanner by Warriors, which is in the Google play store.
 
The App description sheds light why it needs those particular permissions (well the Prevent device from sleeping is to keep the phone from going to sleep while scanning).

Since it seems to be able to add contact data (I'm assuming embedded in a QR code), that is why it needs the contact permissions.

In all honesty, the number of malware on the market is vastly outnumber by the number of legitimate apps (especially when you are talking about heavily used apps with positive reviews). You certainly want to be cautious when looking over the permissions for an app, but the explanation for why an app needs a surprising permissions is generally (1) they need it for some secondary feature (like the contact permissions for the QR app) or (2) the methods the app uses for the primary features is unintuititive (or 3, they need it to make the ad's work which is how they fund the app).
 
The developer is a little piggy and just asks for all permissions. It is not the most mature or structured development community at this time. As such they over reach, or are a little less than benevolent on those free apps.

Bleeding edge has a cost. Yes those permissions could be used for malice so be careful and only use trusted.
 
Thanks all.

So am I correct in assuming that these permissions only come into force when you're actually using the app in question?

The wording appears to indicate that these apps can simply take control of your phone and do all sorts of stuff at any time!! I was particularly freaked out by a Facebook app I looked at, and a video I watched the other day seemed to suggest that it simply took over your phone and was allowed to do all sorts.

Perhaps I am being paranoid, but I don't want to get anything nasty on my shiny new toy!!
 
Yes they do. For example Skype, when you look at it, it has all sorts of permissions like taking control of your contacts and making calls and stuff. But if you realize it, on a different device, say iPhone or Windows, it also has these permissions, they just did not let you know about it, and you trust it because Apple/MS says its ok. But in the end, it also has access to your contacts and phone call abilities.

Basically just read reviews and try not to download apps with obscure permissions.
 
You are doing the right thing to be cautious.

In addition to reviewing market comments, developer info, reviewing permissions carefully, etc you might look at Droidwall for Gingerbread or other similar Apps. After all just because an App has a need for a particular sensitive permission to do its job, and is popular on the market, and useful doesn't mean it's not malware!!!.

Droidwall let's you veto internet access for Apps that don't require it.
Not only enhances security (*), but gets rid of annoying ads and associate battery/data usage.
Extremely lightweight (I don't think there is any running program... it just modifies a table somewhere), and free.

* The security improvement comes from preventing those apps from transmitting their sensitive data back to originators (doesn't hurt if they get access to your contacts if they can't send them anywhere). But at the same time, I don't want to give you a false sense of security... it's not perfect.. someone mentioned there is period of time during boot when some apps may be able to get internet access.
 
You must log in or register to reply here.
Back
Top Bottom