app permissions explained – what do they really...

3
App Permissions Explained – What Do They Really Mean? androidpit.com /app-permissions-explained Every time you want to install an app from the Google Play store, you're made to sign-off on a number of different app permissions. Unfortunately, it's not always easy to understand what you're permitting an app to do. Because of the confusion over intrusive permissions, many people have simply uninstalled suspicious-sounding apps. When should you uninstall an app because of its creepy permissions and when are said permissions warranted? Below you can find an overview of some of the most common permissions and what they mean for you and your phone. Directly call phone numbers What it sounds like. This app permission allows apps to dial phone numbers without notifying you first. Apps like Skype or Google Talk require this permission for obvious purposes. Malicious apps can exploit this authorization to secretly call paid numbers without your knowledge. If the app is asking for this permission and has nothing to do with making phone calls, stay far, far away. Send SMS messages Beware of any non-SMS app asking for this permission. Malicious apps can send messages without your permission, incurring large bills. Modify or delete USB storage If an app asks for this permission, it can acess your entire memory, and read, edit and delete your data. You should be very wary of apps asking for this permission. In combination with access to the Internet, an app could upload private photos to a website. A special note: all apps are granted this permission in any Android operating system below Android 1.5. You've got to be extra careful if you're working with an older version of Android. Read and change my contacts Pretty self-explanatory. This app may not actually change your contacts, just access them. SMS, social networking and address book apps tend to use this permission, but for other apps it is usually unncessary. As your contacts data is very sensitive, extreme caution is advised here. Bookmark web pages and read web history Alternative browsers, back-up tools and possibly some social networking apps need these permissions. But if a game is asking for them, it should set off alarm bells since the app may want to spy on your browsing behavior. Read sensitive log data This permission is very important! It allows apps to read log data from other apps. Sometimes this log data is very sensitive and apps shouldn't need that permission. There are some exceptions, like the Twitter app Plume which needs the permission to submit detailed bug reports to developers. But watch out for other apps.

Upload: lethu

Post on 10-Mar-2018

218 views

Category:

Documents


5 download

TRANSCRIPT

Page 1: App Permissions Explained – What Do They Really …russwilson.coffeecup.com/androidpit.com-App_Permissions_Explained...App Permissions Explained – What Do They Really ... state

App Permissions Explained – What Do They ReallyMean?

androidpit.com /app-permissions-explained

Every time you want to install an app from the Google Play store, you're made to sign-off on a numberof different app permissions. Unfortunately, it's not always easy to understand what you're permittingan app to do. Because of the confusion over intrusive permissions, many people have simplyuninstalled suspicious-sounding apps. When should you uninstall an app because of its creepypermissions and when are said permissions warranted? Below you can find an overview of some of themost common permissions and what they mean for you and your phone.

Directly call phone numbers

What it sounds like. This app permission allows apps to dial phone numbers without notifying you first.Apps like Skype or Google Talk require this permission for obvious purposes. Malicious apps canexploit this authorization to secretly call paid numbers without your knowledge. If the app is asking forthis permission and has nothing to do with making phone calls, stay far, far away.

Send SMS messages

Beware of any non-SMS app asking for this permission. Malicious apps can send messages withoutyour permission, incurring large bills.

Modify or delete USB storage

If an app asks for this permission, it can acess your entire memory, and read, edit and delete your data.You should be very wary of apps asking for this permission. In combination with access to the Internet,an app could upload private photos to a website. A special note: all apps are granted this permission inany Android operating system below Android 1.5. You've got to be extra careful if you're working with anolder version of Android.

Read and change my contacts

Pretty self-explanatory. This app may not actually change your contacts, just access them. SMS, socialnetworking and address book apps tend to use this permission, but for other apps it is usuallyunncessary. As your contacts data is very sensitive, extreme caution is advised here.

Bookmark web pages and read web history

Alternative browsers, back-up tools and possibly some social networking apps need these permissions.But if a game is asking for them, it should set off alarm bells since the app may want to spy on yourbrowsing behavior.

Read sensitive log data

This permission is very important! It allows apps to read log data from other apps. Sometimes this logdata is very sensitive and apps shouldn't need that permission. There are some exceptions, like theTwitter app Plume which needs the permission to submit detailed bug reports to developers. But watchout for other apps.

Page 2: App Permissions Explained – What Do They Really …russwilson.coffeecup.com/androidpit.com-App_Permissions_Explained...App Permissions Explained – What Do They Really ... state

Read phone state and identity

This permission is a double-edged sword. On the one hand, it's normal for any app to read your phonestate so that the app can be interrupted when, for example, you need to take a call. But on the otherhand, the app gains access to two device numbers: your IMEI and IMSI. Many app developers usethese numbers to protect their apps from piracy, but theoretically they could also use these numbers tolocate you.

Fine GPS Location

This permission tells the app where you are, located by GPS satellites. It is needed by navigation orlocation-based apps, but could also be abused for advertising purposes.

Coarse Network-based Location

Almost identical functionality as the above, but less accurate than the GPS at finding your location.

Create Bluetooth connections

Apps for wireless transmission require this right, so that your files can be communicated via Bluetooth.usually, this notification is relatively harmless.

Full Internet access

With this privilege, you have to be extra careful! As the name suggests, the app receives full access tothe Internet. Data can be uploaded without your knowledge. many apps need this permission to work atall, but just as many apps do not. In combination with other permissions, this app can quickly causewidespread damage. You should therefore consider carefully before installing whether or not an appreally needs this permission.

View Network status / WiFi state

This tells an app when you are in the vicinity of WiFi. Pretty harmless.

Manage Accounts

Allows an app to find out what accounts you have and connect with them. The best example of this apppermission is the Facebook app, which allows you to sign into your Facebook account through the app.But watch out for apps like games or recipe apps that want to manage your accounts, because there isa theoretical possibility that a malicious app could delete your Google account from your device.

Use credentials

This app permission allows any application the authorization to use your account. They do this typicallybe giving what's called an AuthToken depending on what account you're using (Google / Faebook/Yahoo, etc.). Typically, your account password is protected from the app. But you should still use greatcaution before installing an app that asks for this permission.

Install Packages (Apps)

This app permission is important for alternative app stores (like AndroidPIT).

Prevent phone from sleeping

Page 3: App Permissions Explained – What Do They Really …russwilson.coffeecup.com/androidpit.com-App_Permissions_Explained...App Permissions Explained – What Do They Really ... state

Video players and other apps need this permission to prevent your screen from turning off while you'rewatching a video or playing a game.

Read sync settings

This allows an application to know if you have background data sync (for Gmail, for example) turned onor off.

Kill background processes

Allows an app to stop other apps. This can lead to data loss. Task Managers typically are granted thispermission.

Control vibrator

Don't laugh! This permission is pretty harmless. It simply allows an app to control the vibrating functionon your phone.

Take photos or video

Alternative camera apps require this right in order to take photographs. Theoretically, a malicious appcan secretly take pictures and distribute them on the Internet but, in practice, it's quite hard for an appto operate your camera.

Conclusion:

Of course you should always read app permissions carefully and consider whether the app you'redownloading really needs permissiont to do xxx. When in doubt, read the reviews: if others have foundthe app to be a malware-infested piece of crap, you'll be able to find that out pretty quickly. While thereare malicious apps out there, you can avoid them by using common sense. There are enough greatapps in Google Play that you shouldn't have to install one that makes you worry.