On Sun, May 1, 2011 at 4:08 PM, TreKing <[email protected]> wrote:
> Interesting. Agreed - the market reports are simple. But that also makes > them fairly useless, IMO. I added auto-bug reporting based on the ACRA > project (but highly simplified and just stripped down to reporting to a > spreadsheet) which includes logging information. > Just to be aware -- the logging information is pretty sensitive. We have been adjusting the permission to be more visible and scary to the user, because it is actually a significant serious potential personal information access vulnerability. We've found it hard enough to keep the platform and its apps clean about logging personal information (pretty much every release has had last-minute fixes for personal information being logged), and when you add in manufacturers and third party apps, it is just impossible. For example there was the manufacturer who released devices whose soft keyboard logged each key pressed, and it is just scary what one sees various third party apps. So... the logs are troublesome. At the very least, you are going to see strong discouragement of accessing them through warnings to the users. There has also been significant pressure to do something stronger, such as not allow third party apps access to the logs at all or only to the data they have written to the log. I don't know if that will actually happen, but it is enough of a concern to be a possibility. For an that is both reading the logs and uploading them to a server, this results in a combination of permissions that also represents a good pattern for a malicious app to abuse. This is also why Android Feedback does not currently make the logs available, because of the kinds of personal information likely to be in them. -- Dianne Hackborn Android framework engineer [email protected] Note: please don't send private questions to me, as I don't have time to provide private support, and so won't reply to such e-mails. All such questions should be posted on public forums, where I and others can see and answer them. -- You received this message because you are subscribed to the Google Groups "Android Developers" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/android-developers?hl=en
