Hacker News new | ask | show | jobs
by eitland 2434 days ago
This is the one I agree most with so I'll add mine here:

- network connectivity as a separate permission (no reason every app should be allowed network access)

- also, permissions systems everywhere need to get updated for this millennium. Some thoughts:

-- to read my photos is OK as long as they don't have direct network access.

-- but today every app has Internet access by default

-- and just because I trust an app to read my photos doesn't mean I should have to give it permission to delete photos

2 comments

I would like finer grained control on photo permissions. Particularly I don't necessarily want to grant it access to ALL of my photos.

And in general, I would prefer most apps actually don't have any access to photos, the photo picker could be completely OS level and the app never actually has access.

This is possible and has been for a long time.

https://developer.android.com/guide/topics/providers/documen...

I'd go as far as requiring a statement of intent (soi) from developers requesting network access, describing the frequency and payload content and size. If the code doesn't match the soi then the app is crippled.