New to Android

[Max_Headroom]

Is there a list of apps that don't have all the stuff hidden in them like the one i saw earlier which is one of the most popular bar-code scanners available free. (see below)

Is there a rule of thumb when looking at apps to install?

THIS APPLICATION HAS ACCESS TO THE FOLLOWING:
HARDWARE CONTROLS
TAKE PICTURES AND VIDEOS
Allows application to take pictures and videos with the camera. This allows the application at any time to collect images the camera is seeing.
NETWORK COMMUNICATION
FULL INTERNET ACCESS
Allows an application to create network sockets.
YOUR PERSONAL INFORMATION
READ CONTACT DATA
Allows an application to read all of the contact (address) data stored on your device. Malicious applications can use this to send your data to other people.
WRITE CONTACT DATA
Allows an application to modify the contact (address) data stored on your device. Malicious applications can use this to erase or modify your contact data.
READ BROWSER'S HISTORY AND BOOKMARKS
Allows the application to read all the URLs that the Browser has visited, and all of the Browser's bookmarks.
STORAGE
MODIFY/DELETE USB STORAGE CONTENTS MODIFY/DELETE SD CARD CONTENTS
Allows an application to write to the USB storage. Allows an application to write to the SD card.
SYSTEM TOOLS
MODIFY GLOBAL SYSTEM SETTINGS
Allows an application to modify the system's settings data. Malicious applications can corrupt your system's configuration.
CHANGE WI-FI STATE
Allows an application to connect to and disconnect from Wi-Fi access points, and to make changes to configured Wi-Fi networks.
PREVENT DEVICE FROM SLEEPING
Allows an application to prevent the device from going to sleep.
Show all
HARDWARE CONTROLS
CONTROL VIBRATOR
Allows the application to control the vibrator.
CONTROL FLASHLIGHT
Allows the application to control the flashlight.
NETWORK COMMUNICATION
VIEW WI-FI STATE
Allows an application to view the information about the state of Wi-Fi.
VIEW NETWORK STATE
Allows an application to view the state of all networks.

 

[El Presidente]

If you're worried about what to look out for, here is an excellent post by alostpacket detailing pretty much everything security wise on Android.

It's massive, but it's probably the most comprehensive anywhere I've seen!

http://androidforums.com/android-ap...ps-avoid-viruses-guide-those-new-android.html

 

[Max_Headroom]

Nice one.

 

[El Presidente]

Aye, it should keep you going for the rest of the day, it's quite hefty!

 

[Lombardi]

Read it fast...oh wait no, read the system tray, fast

 

[daveybaby]

The thing is, a barcode scanner app DOES have legitimate uses for all of those permissions.

* To read a barcode, the app needs to use the camera/flash

* QR codes (2d barcodes) can contain web addresses. Therefore the app needs to be able to use the internet/network/wifi and your web browser to open the web pages.

* QR codes can contain contact details. Therefore the app needs to be able to read/write contact data.

... and so on.

Sometimes apps do have excessive permissions requirements, and it's definitely good practise to check what an app requires, but AFAICT this isnt the case for this app. If anything, i'm surprised it doesnt ask for *more* permissions than it does - QR codes can contain map coordinates, calendar entries, email addresses, phone numbers, SMS numbers etc etc... You can imagine the permissions required to take full advantage of all of these features. Sounds to me like the app is slightly underpowered ;-)

 

[Max_Headroom]

Thanks Dave, Its a bit of a minefield all this if you are new to it, i think i will err on the side of caution for the time being and only install things that look harmless.