When installing applications from android market some permissions are
not listed to the user, but are granted to the application upon
installation, including the notorious "Phone calls" permission.
When installing locally through "Package installer" the full set of
permissions is listed.
That behavior may be observed with many applications one of which is
'net.jimblackler.newswidget' (no offense Jim - I hope it's true
there's no bad publicity).

This bug was reported as issue #9365 [0] back in Jun 27, 2010 but has
gone so far unnoticed, perhaps because android market is not part of
AOSP, which is why I post here.

I consider this a serious problem as it is misleading for users and
reflects badly on application developers and the whole android echo
system. Hopefully this will get the needed attention and treatment,
especially after all the recent noise around applications security and
privacy breaches.

[0] http://code.google.com/p/android/issues/detail?id=9365

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to