New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Too many permissions #574
Comments
android.permission.BROADCAST_WAP_PUSH Receive MMS. android.permission.RECEIVE_BOOT_COMPLETED For updating the TS directory. android.permission.RECEIVE_MMS Receiving MMS. android.permission.CHANGE_NETWORK_STATE Send/Receive MMS. android.permission.WAKE_LOCK Send/Receive MMS. android.permission.READ_CALL_LOG Showing "recent" contacts. android.permission.GET_ACCOUNTS Register with GCM. |
These were only examples. What about:
(directly from my phone when installing) |
MMS and displaying your avatar icon as well as import/export identity keys. The app is OSS, you or anyone you know can look at the source to verify there's nothing superfluous in there. The permissions TS requires are what it needs to perform its function, and no more. |
I also have a short question about permission. Why do you need the READ_PHONE_STATE (Phone calls) permission? |
@mirko2324 For getting the local device's number. Used for push registration, as well as parsing MMS, etc. |
These are actually sane permissions for such an app as TextSecure. As stated, this project is open-source, which means you're able to take a look at the code yourself, and compile it yourself if you feel the need. It should be mentioned that this is not true for many of the stock applications on your phone you've decided are 'trustworthy' by default. |
Seriously: There is no need to load Photos for a Messaging application. Nor does it need to do phone calls. What I mean with my report: Googles permission tool is quite intransparent (both the new and the old version). But a serious application could write: "We need phone permission because we want wo call home." - "We need Location because we offer that data to our ad partners" - or more seriously: "We need contacts because we want to offer you your address book in our application". |
@daald ok then why are you still posting here? |
deleted
The text was updated successfully, but these errors were encountered: