On Fri, Nov 28, 2008 at 8:16 PM, Sam Hiatt <[EMAIL PROTECTED]> wrote:
> A reasonable security model would allow the user to grant or deny
> access to positional information to specific apps.

I don't have a G1, but isn't this already possible and enforced?
Applications have to state what special functionality they want to use
in the Manifest:
http://code.google.com/android/reference/android/Manifest.permission.html

I thought when users installed an app that intended to access the
internet or their location, it asked them if they wanted to grant
permission?

> Additionally, the user should know if the app
> tagging the photo also tries to post its location to a web server.

I could be wrong, but that seems rather difficult or impossible.  So
you fetch the location and get back an object... then you pull out the
lat / lon as basic numbers, how do you track those in memory?  How do
you keep this information tagged so that Android automagically knows
to throw a red flag when that random set of bytes is sent over the
network?

I don't think you can get more granular than "do I trust this app I'm
installing with my location?".

Brett

Reply via email to