New DroidDream Light Invades Android Market

[exfileme]

A variant of the DroidDream Light malware was discovered on the Android Market this past Friday. Yay Google.

New DroidDream Light Invades Android Market : Read more

 

[getochkn]

Saying look at permissions is useless as every apps from a browser to simon seems to need access to network, phone calls, etc. I can't think of any app I've installed from the market that doesn't access almost everything anyways.

 

[skaz]

Looking at permissions is a good habit. Look for things like "account credentials". And check reviews, total downloads, date of app.

 

[Camikazi]

Yay DroidWall my DroidWall by default blocks any program from accessing the internet in anyway until I allow it. Have to be rooted to use it but it's a great little front end for iptables.

 

[cyprod]

[citation][nom]getochkn[/nom]Saying look at permissions is useless as every apps from a browser to simon seems to need access to network, phone calls, etc. I can't think of any app I've installed from the market that doesn't access almost everything anyways.[/citation]
No offense, but then you're exactly the type of user they're going after. I never install an app unless I can justify why the app needs a permission. For example, shopper apps (the bar code scanning ones) for some odd reason always want access to my address book. That makes no sense, I'll just keep looking till I find one without that access. I assume if it's asking for permissions that don't make sense, it's probably doing something behind the scenes I don't want it to do.

 

[hellwig]

[citation][nom]cyprod[/nom]No offense, but then you're exactly the type of user they're going after. I never install an app unless I can justify why the app needs a permission. For example, shopper apps (the bar code scanning ones) for some odd reason always want access to my address book. That makes no sense, I'll just keep looking till I find one without that access. I assume if it's asking for permissions that don't make sense, it's probably doing something behind the scenes I don't want it to do.[/citation]
No offense, but those apps do make sense. Those bar-code scanning apps need access to your address book because QR-codes are a convenient way to transfer contact information. Rather than hand someone your business card, you convert your contact information into a QR-code. Someone else captures that code off your phone onto their own, and the app itself then creates a contact in their address book. Otherwise, you'd have to somehow copy contact information (name, email, phone) individually into a single text document, then copy that text into a QR-generating program. The person scanning that code would then have to copy each field individually back into a new contact. What a hassle, when all you have to do is allow the QR-code reading app access to your address book. Now, if you don't want to use it that way, that's your choice, but it makes complete sense to many people.

 

[dami]

Two points, one for the article and one for Cyprod.

1) Why are users of Lookout Free and Premium "naturally" protected? That's like saying naturally Norton and Clamwin users are protected. Just because you have virus protection software does NOT automatically make you immune.

2) Bar code scanning apps require address book info, because Quick Response Codes (QRC) can contain a company mailing address, email address, and phone numbers. Therefore, they need permission to write to your address book, to store that information.

 

[JasonAkkerman]

QRC apps, and bar code scanning apps for shopping reasons are two different thing.

 

[Guest]

@hellwig

two dudes on smartphones and not one of them know how to transfer contact details (i guess electronic business cards never crossed their minds) via Bluetooth but instead chooses to use QRC on a printed business card (oh god dont tell me they going to transfer the picture via Bluetooth, or worst still try and capture the QRC off the screen....)

@dami

I do not wish to add any marketing contacts to my addy book, i would only go as far as using QRC to get to a web page, the last time i thought hey i need to add this companies contact details to my personal address book asap after seeing a QRC on one of their product was.... never