Conversation

This Tweet was deleted by the Tweet author. Learn more

This Tweet was deleted by the Tweet author. Learn more

This Tweet was deleted by the Tweet author. Learn more

This Tweet was deleted by the Tweet author. Learn more

This Tweet was deleted by the Tweet author. Learn more

Replying to

and

It's problematic because unlike the dangerous permissions, bypasses weren't treated as bugs. For example, it's possible for apps to make HTTP GET requests by opening a URL in a browser via standard intents. Those intents would all need to require INTERNET or consent for each use.

8:27 PM · Dec 27, 2018Twitter Web Client

This Tweet was deleted by the Tweet author. Learn more

Replying to

and

I don't think people would tolerate that for very basic use cases like opening links in a browser. Apps with internet access would be able to bypass this anyway since they can communicate with each other via the network. It's difficult to force apps to protect themselves.

1

1

Show replies