Hacker News new | ask | show | jobs
by yourad_io 4260 days ago
> Without getting boringly into the intricacies of Android's underbelly, even without the "internet" permission (which is now standard with higher API levels anyway), you can connect to the internet through other APIs and inform a server that you exist.

At the risk of boring someone else, any more info on this? Is this true for the later versions of Android? (4.2+)

I found something similar to what you describe but for 2.x (and then, a very visible "exploit" - i.e. opening the web browser)