Slashdot Mirror


Google Play Starts Manually Whitelisting SMS, Phone Apps (arstechnica.com)

An anonymous reader quotes a report from Ars Technica: Google is implementing major new Play Store rules for how Android's "SMS" and "Call Log" permissions are used. New Play Store rules will only allow certain types of apps to request phone call logs and SMS permissions, and any apps that don't fit into Google's predetermined use cases will be removed from the Play Store. The policy was first announced in October, and the policy kicks in and the ban hammer starts falling on non-compliant apps this week.

Google says the decision to police these permissions was made to protect user privacy. SMS and phone permissions can give an app access to a user's contacts and everyone they've ever called, in addition to allowing the app to contact premium phone numbers that can charge money directly to the user's cellular bill. Despite the power of these permissions, a surprising number of apps ask for SMS or phone access because they have other, more benign use cases. So to clean up the Play Store, Google's current plan seems to be to (1) build more limited, replacement APIs for these benign use cases that don't offer access to so much user data and (2) kick everyone off the Play Store who is still using the wide-ranging SMS and phone permissions for these more limited use cases.
Google provides a help page that helps explain the new rules and offer workarounds for some use cases.

37 comments

  1. Google and privacy? by Order_66 · · Score: 0

    Google must really hate competition.

    1. Re:Google and privacy? by Anonymous Coward · · Score: 0

      Hey Order_66 is this you buddy? You ought to lose some babyfat before you get murdered for being a nazi coward, maybe get some exercise in prison? :) Stupid nazi faggot problems lol. #Curing inbreds.

    2. Re:Google and privacy? by Anonymous Coward · · Score: 0

      Inbred nazi mutants must really hate everybody.

    3. Re: Google and privacy? by Anonymous Coward · · Score: 0

      Build that garden Googs high-5

  2. Why now? by Anonymous Coward · · Score: 0, Interesting

    I would have said that Android was designed almost specifically to transfer information like call logs, SMS, and contact lists to very bad people. Why did Google suddenly change their minds after more than 10 years?

    1. Re:Why now? by Anonymous Coward · · Score: 0

      I would agree about Android's design, and would postulate that increasing Federal attention to the results of all this information leaking is what is changing their minds.

      Not that I believe that our Congress-critters really give a damn about our privacy, but I think they're finally starting to realize that a lot of this crap potentially affects them and those they care about as well. Once that ball starts rolling, changes are going to happen, either voluntarily or otherwise. Google may just be trying to stay ahead of the wave.

    2. Re:Why now? by Anonymous Coward · · Score: 0

      Exactly. I'm happy when the Googler's arms and legs are cut off and the company is burned to the ground.

    3. Re:Why now? by Anonymous Coward · · Score: 0

      Every phone is now infected with malware.

    4. Re:Why now? by Anonymous Coward · · Score: 0

      Nope, only the phones of clueless, tech illiterates. They are the same noobs who think you can't have privacy/security on the internet.

      Hopefully none of them ever get jobs in IT or related fields.

  3. "protect user privacy" by DarkRookie2 · · Score: 1, Troll

    Google says the decision to police these permissions was made to protect user privacy.

    HAHAHAHAHA
    Like Google will ever do this. Their whole business model pretty requires a lack of this.

    --
    http://progressquest.com/spoltog.php?name=Son+Of+Son+Of+DarkRookie
    1. Re:"protect user privacy" by Anonymous Coward · · Score: 1

      You're right. It should read, "Google says the decision to police these permissions was made to protect user privacy from anyone but Google." Facebook actually sells/trades user data. Google's whole model is on hording user data precisely so companies have to constantly go through Google for everything. It's little wonder so few companies really complain about Facebook in comparison.

    2. Re:"protect user privacy" by Anonymous Coward · · Score: 0

      Just like MS and Apple, Google only wants a monopoly for selling user data. Having the 3rd party spyware in phones diverts some of the money past Google. The new Android permissions surely will be available for anyone who will create a revenue sharing model for spying.

  4. Hmm by Severus+Snape · · Score: 1

    Have Google's apps previously been abusing these permissions?

    Can Google now circumvent this block?

    1. Re:Hmm by AHuxley · · Score: 1

      All about the ads and who gets to see what.

      1. Pay for an approved ad.
      2. Make an app thats collects on users like an ad?

      Option 1 brings in the cash.
      Option 2 is giving data sets away for free.

      --
      Domestic spying is now "Benign Information Gathering"
    2. Re:Hmm by Anonymous Coward · · Score: 0

      Have Google's apps previously been abusing these permissions?

      Can Google now circumvent this block?

      Type of app still allowed to steal all the data: Google's

  5. Long Overdue Step by dryriver · · Score: 4, Informative

    There are sooo many Android apps that look nice - and free - at first, but then want to access every nook and cranny of your Android device, including the ability to look through your contacts directory and listen in/report on any phonecalls or other communications you perform with the device. My guess is that some of these apps are actually made by state-actors who want to eavesdrop on unsuspecting smartphone users all over the world - the information gleaned from users in other countries of these smartphone apps may be worth gold to these state-actors.

    --
    Why did the chicken cross the road? Because Elon Musk put an AI chip in its head.
    1. Re:Long Overdue Step by ljw1004 · · Score: 4, Insightful

      There are sooo many Android apps that look nice - and free - at first, but then want to access every nook and cranny of your Android device, including the ability to look through your contacts directory and listen in/report on any phonecalls or other communications you perform with the device. My guess is that some of these apps are actually made by state-actors who want to eavesdrop on unsuspecting smartphone users all over the world.

      My guess is just that the developer wants to make money from ads, and incorporated an ad SDK from a third party without thinking. And the ad broker who wrote that SDK obviously wants to scrape as much information as possible from the device so they can (1) target ads more precisely, (2) sell the data.

      (I base this on having seen how universal it is to consume third-party SDKs without even thinking about how the SDK works...)

    2. Re:Long Overdue Step by Swave+An+deBwoner · · Score: 1

      Curiously though this blackout applies even to apps that clearly have reason to view the incoming or outgoing phone number (not the call log but the CallID), e.g., call recorders:

      https://nllapps.com/apps/acr/google-denies-phone-number-accesss.htm

    3. Re:Long Overdue Step by Anonymous Coward · · Score: 0

      Install this and worry no more.

    4. Re:Long Overdue Step by johnsie · · Score: 1

      In a previous job I wrote phone some discreet tracking software so that we could see where the company phones where. Eventually one of my bosses asked me to modify the app so that he could read his girlfriends sms messages without her knowing. I was surprised how easy it was to add this feature. This adjustment to Android security is about 7 or 8 years too late.

  6. Only approved ads will by AHuxley · · Score: 1

    get more access to the users habits.
    Keeps the ad competition out from getting free data sets.

    --
    Domestic spying is now "Benign Information Gathering"
  7. Just weeding out competition by Anonymous Coward · · Score: 0

    After all, the Goog can't have just anybody collecting and selling the information they are collecting and selling themselves now can they?

  8. Good.... thanks for dropping the hammer by Anonymous Coward · · Score: 0

    Too many apps abusing permissions and the privacy of users!!
    This is a good decision by Google.

  9. Get off my lawn! by Anonymous Coward · · Score: 0

    "You pestering kids me look bad! Git off my lawn. I dun need to git your excaptiochan to me permisshons! I make thar stuffs!"

    And that's what you hear from your drunk uncle or..?

  10. For more information, see: by bill_mcgonigle · · Score: 1
    --
    My God, it's Full of Source!
    OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
  11. Android malware is the whole damn phone by epine · · Score: 1

    That this was ever any other way in the first place is a tragic indictment.

  12. List of apps that have failed whitelisting? by schwit1 · · Score: 1

    Is Google or anyone else keeping a tally of what apps have been whitelisted and those that failed?

  13. How about Hangouts? by sremick · · Score: 2

    How about they give back SMS permissions to the Hangouts app, so that it can register as the default SMS app and those of us who use our Google Voice # as our primary SMS can have the seamless integration back? As it is now, I can't click on a phone # from a contact to launch sending a text... or any other app that shows phone numbers. Instead, I have to go into Hangouts first then initiate the text from there.

    I know it's be really complicated for Google to work with the company that makes Hangouts, but I'm sure some sort of channel of communication could be opened so that proper interoperability could be restored like it used to.

    1. Re: How about Hangouts? by Anonymous Coward · · Score: 0

      Don't worry, they plan to make Google voice even harder to use.

  14. Re: "protect user privacy" ... like Apple by Anonymous Coward · · Score: 0

    Remember, Apple's walked green is to keep you in. They don't sell your data; they lease you.

  15. You first Google by Anonymous Coward · · Score: 0

    Maybe they can sort their own shit out first?

    Google Translate on Android requires access to: Camera, Contacts, Microphone, SMS, Storage.

    WTF does Translate need access to my Contacts or SMS? Not only that, but Translate requires Google Play Services to also have access to Telephone and Body Sensors. To translate some text.

  16. Intentional tracking apps by A.+Craig+West · · Score: 2

    Google cracked down on Android Lost a little while ago, which I find rather annoying. I have my own phones lo-jacked in case they get stolen, but now the app gets disabled by default. I'm sure this will be even worse now...

    --
    It's not a bug, it's a feature...
    1. Re:Intentional tracking apps by dkman · · Score: 1

      Exactly. I saw a tweet from Cerberus (a "find my phone" app) that blocking them from SMS was going to make their job more difficult.

      I'm not sure if they got it worked out or found a way around it, but "Security Apps" was intentionally one of the things blocked from the whitelist. I don't see a reason why. I would think that whitelisting should be a no brainer for legitimate security apps.

      --
      I refuse to sign