Hacker News new | past | comments | ask | show | jobs | submit login

I've heard (from random people) it's about whether the permission aligns with the category the app falls into.

A map app is assumed to have a legitimate purpose for location. But if you want to make a journalling app that automatically captures where you visit (like Apple just did) you'll have a hard time being allowed to make the argument.




That would make sense as far as my usage goes. The app revolves around logistics, it's a business focused app... all those things go hand in hand with location data.

I can imagine if a human saw it it would be a "yeah of course" kind of moment.

Some rando "free crossword puzzles", might get a closer look.


I still remember the early days when you needed a third party app to use your camera flash as a flashlight, and then having most of them request your contacts, location, and every other type of data that the OS would allow.


I really try to leverage builtin apps as much as possible. For example, I don't have a music playing app. I use "Files" and "Podcasts" which were preloaded. Files can play music for me just fine, because I don't have any playlists or sophisticated playback needs (I lied, I do have a few playlists made out of folders with files arranged just so.)

I don't really try to solve problems with 3rd party apps, like I don't have any adblocking, but I use NextDNS so the private DNS blocking is built in and I can use that from anywhere. I just use my default web browser and my default email reader and all that.

I think it's a fundamental type error that people tool up their little mobile device as if it's a desktop computer full of software. Again, I have little storage space to give over to a bunch of third-party cruft. So I use the preloaded apps to the best of their abilities, and I load stuff as I have a fundamental need or there's a paid service I'm accessing with them.

I uninstall apps frequently too. It is essential security review to reduce attack surface. I like how the Android 11 will revoke permissions that haven't been used in a while. It's good practice to remove your unused apps because then you are less likely to succumb to supply-chain attacks, among others.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: