Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Too many permissions #574

Closed
daald opened this issue Jan 26, 2014 · 9 comments
Closed

Too many permissions #574

daald opened this issue Jan 26, 2014 · 9 comments

Comments

@daald
Copy link

daald commented Jan 26, 2014

deleted

@moxie0
Copy link
Contributor

moxie0 commented Jan 26, 2014

android.permission.BROADCAST_WAP_PUSH

Receive MMS.

android.permission.RECEIVE_BOOT_COMPLETED

For updating the TS directory.

android.permission.RECEIVE_MMS

Receiving MMS.

android.permission.CHANGE_NETWORK_STATE

Send/Receive MMS.

android.permission.WAKE_LOCK

Send/Receive MMS.

android.permission.READ_CALL_LOG

Showing "recent" contacts.

android.permission.GET_ACCOUNTS

Register with GCM.

@moxie0 moxie0 closed this as completed Jan 26, 2014
@daald
Copy link
Author

daald commented Jan 26, 2014

These were only examples. What about:

  • unlimited internet access
  • disable standby
  • read/write profile data

(directly from my phone when installing)

@moxie0
Copy link
Contributor

moxie0 commented Jan 26, 2014

MMS and displaying your avatar icon as well as import/export identity keys. The app is OSS, you or anyone you know can look at the source to verify there's nothing superfluous in there. The permissions TS requires are what it needs to perform its function, and no more.

@ghost
Copy link

ghost commented Mar 3, 2014

I also have a short question about permission. Why do you need the READ_PHONE_STATE (Phone calls) permission?

@moxie0
Copy link
Contributor

moxie0 commented Mar 3, 2014

@mirko2324 For getting the local device's number. Used for push registration, as well as parsing MMS, etc.

@daryltucker
Copy link

These are actually sane permissions for such an app as TextSecure. As stated, this project is open-source, which means you're able to take a look at the code yourself, and compile it yourself if you feel the need.

It should be mentioned that this is not true for many of the stock applications on your phone you've decided are 'trustworthy' by default.

@ogai
Copy link

ogai commented Jul 24, 2015

screenshot_2015-07-24-15-52-14

@daald
Copy link
Author

daald commented Jul 24, 2015

Seriously: There is no need to load Photos for a Messaging application. Nor does it need to do phone calls. What I mean with my report: Googles permission tool is quite intransparent (both the new and the old version). But a serious application could write: "We need phone permission because we want wo call home." - "We need Location because we offer that data to our ad partners" - or more seriously: "We need contacts because we want to offer you your address book in our application".
But for me it doesn't matter anymore. I chose to not use this application.

@moxie0
Copy link
Contributor

moxie0 commented Jul 24, 2015

@daald ok then why are you still posting here?

@signalapp signalapp locked and limited conversation to collaborators Jul 24, 2015
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Development

No branches or pull requests

4 participants