Applications allowed to do to much

Forums › Android › Applications allowed to do to much

rugrat

3088 posts

Uber Geek

Lifetime subscriber

#96117 20-Jan-2012 15:57

Went to update dragon play poker, live holdem which i enjoy playing.

See new things it can do is download to application from cloud services, and even had the word malicious at the end of it.

Also had can change wifi access points, and modify configeration of wifi access, what the heck.

Why does android allow an apllic to make so many changes to set up on phone, seems dodgy to me so didn't update it.

timmmay

20429 posts

Uber Geek

Trusted

Lifetime subscriber

#571637 21-Jan-2012 14:54

Android has a great permission system, you can see what it's allowed to do before you download the app. If you don't like the permissions it's asking for, don't run it.

Lenovo

Shop now for Lenovo laptops and other devices (affiliate link).

michaelmurfy

meow
13195 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#571665 21-Jan-2012 16:28

timmmay: Android has a great permission system, you can see what it's allowed to do before you download the app. If you don't like the permissions it's asking for, don't run it.

Bet me to it! Before pressing "Accept" read it's permissions.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

bmt

574 posts

Ultimate Geek

#571678 21-Jan-2012 16:55

He already said he didn't update it..

The question he asked was why applications are allowed to make so many changes (i.e. ones that seemingly have no relevance to the app itself).

DrStrangelove

368 posts

Ultimate Geek

#571706 21-Jan-2012 18:17

Just for fun I had a look at the permissions of dragon play poker.

Given it's an online application (as I understand it), the permissions don't seem to out of scope.

To be honest, I wouldn't have been surprised if there were more permissions required.

WiFi net access probably comes into play if you move out of range of one WiFi AP and into range of a 'better' WiFi AP.

The 'Read phone state and identify' does have quite a broad scope. I don't think there is a 'read phone state' which raises a few eyebrows. Most apps are just checking for incoming calls and 'branching' to handle them by turn off any gaming audio and etc. But this permission does allow reading of the IMEI and IMSI values, along with your phone number and etc.

It's just the way it is and until Android re-codes the permission levels to a finer subset, then that's the best developers have to go with. (My understanding from what I've read)

BUT, then with a finer set of permissions, you'll be getting an even bigger list of permissions and the wheels go round and round on the big red bus.....

It's the 'applications' that allow 'Send SMS' I'd seriously worry about unless it's an SMS application, even then I'd be VERY curious.

www dot 1mobile dot com (an Android download site) has downloadable 'SMS' viruses, one of which requests read access to sms/mms and the ability to send SMS.

I use it to test anti-virus applications on the theory if you have a known virus and the virus checker doesn't detect it... that's not good. I know Lookout and NetQin detect it and request to delete it on download.
When Avast was in beta it allowed the virus, haven't checked now that Android Avast is out of beta.

I have a TV box with no phone so I like to check these things out. (Things to do while the adverts are on TV) however I'd NEVER do this on a phone.

--------------------------------------
Permissions of dragon play poker
--------------------------------------

PermissionsThis application has access to the following:

Network communicationfull Internet accessAllows an application to create network sockets.
Phone callsread phone state and identityAllows the application to access the phone features of the device. An application with this permission can determine the phone number and serial number of this phone, whether a call is active, the number that call is connected to and the like.
Storagemodify/delete USB storage contents modify/delete SD card contentsAllows an application to write to the USB storage. Allows an application to write to the SD card.
System toolschange Wi-Fi stateAllows an application to connect to and disconnect from Wi-Fi access points, and to make changes to configured Wi-Fi networks.

Hide

Your accountsdiscover known accountsAllows an application to get the list of accounts known by the device.view configured accountsAllows applications to see the usernames (email addresses) of the Google account(s) you have configured.
Hardware controlscontrol vibratorAllows the application to control the vibrator.
Network communicationview Wi-Fi stateAllows an application to view the information about the state of Wi-Fi.receive data from InternetAllows the applications to accept cloud to device messages sent by the application's service. Using this service will incur data usage. Malicious applications may cause excess data usage.view network stateAllows an application to view the state of all networks.

Update - Oh and just quickly, I wouldn't worry about the above permissions. As just about every application uses 'Read phone state and identify' and given the developer is 'known' and the app is reviewed well...what the heck.

I'm guessing if the developers put in more specific details on access requirements, more people would become confused and spooked. Best advise I can give is don't download unknown applications that are not review and require extensive permissions.

Otherwise just enjoy those free applications while you can.

rugrat

3088 posts

Uber Geek

Lifetime subscriber

#572018 22-Jan-2012 18:12

Thankyou. It plays very good online.
I think they make money by having people buy poker chips, when they run out. I've never paid them anything. Not sure how much i have on that one but think i've made over $100,000 as been a while.

Up to 134 million on another one without paying them a cent, just it's not real money. :(
People keep overbetting, doubt they'd do it with real money.

I'll download it next time i connect phone to wifi, and carry on building up fake money balance :)

Skolink

1081 posts

Uber Geek

#572368 23-Jan-2012 14:25

I also wonder about permissions that apps want that are not related to the function of that app. I've been meaning to see if there is a 3rd party app that can block others app's access to things they don't need - esp network/internet access.

DrStrangelove

368 posts

Ultimate Geek

#572590 24-Jan-2012 06:53

Skolink: I've been meaning to see if there is a 3rd party app that can block others app's access to things they don't need - esp network/internet access.

Ha ha you just made a few systems programmers and developers smile.

Sounds like someone needs to install NetQin Security. Virus checker, backup, theft tracking and etc and includes a network data usage monitor which tracks data usage of each individual application. This includes excessive traffic alerts on thresholds you've set.

Has a little on screen 'widget' that displays network data traffic in real time and is always displayed in the foreground(on top) of any running application.

Drill down on permissions of all installed applications.

Also comes with a firewall.

Sorry, no tinfoil lined leather hat though.

riahon

946 posts

Ultimate Geek

#572600 24-Jan-2012 07:49

rugrat: Thankyou. It plays very good online.
I think they make money by having people buy poker chips, when they run out. I've never paid them anything. Not sure how much i have on that one but think i've made over $100,000 as been a while.

Up to 134 million on another one without paying them a cent, just it's not real money. :(
People keep overbetting, doubt they'd do it with real money.

I'll download it next time i connect phone to wifi, and carry on building up fake money balance :)

The skeptic in me is thinking that 'everyone' is sitting on millions of fake money. They want you to believe you are beating real people and then - bazingo - you decide it's time to start paying, and paying, and paying.

I have never played online poker, tried it once (didn't even get past one hand) after watching a friend play but for the life of me I couldn't see the attraction.