Hacker News new | ask | show | jobs
by digi_owl 4141 days ago
Google badly obfuscated permissions in a recent Play store update.

Where before it listed each permission, and required a manual approval of any was added in a app update, it now only list categories.

And it will only require manual approval if a new category is added.

And the categories are wide enough that someone can add an innocuous permission initially, and then push a update some time later that gives them virtually free reign of the user data.