It would be nice if we can have another category in the storage as below - *Protected Storage* : This can be used to store files or contents of the Apps that deals with confidential data. Remaining stuff like gallery or videos can be accessed with usual storage permission.
Any comments on this? Thanks, Saba On Tuesday, 16 July 2013 14:05:58 UTC+5:30, Yury Zhauniarovich wrote: > > Actually, there are a lot of scientific papers who consider this > possibility. It's better to look into them to find out if there are real > examples of such kind attack. As for me, it is very easy to implement so to > my point of view these kind of applications should exist in a wild. > > On Monday, July 15, 2013 5:51:01 PM UTC+2, Kristopher Micinski wrote: >> >> Ah, I misunderstood your question. >> >> An app without internet permission cannot -- in and of itself -- >> upload content to the internet directly. I thought you were only >> referring to storage. >> >> It would be possible that this could happen if another app had an >> endpoint that allowed data to be sent to the internet indirectly (as a >> proxy). This is typically referred to as a confused deputy attack: >> though I don't know of any real world examples on Android. >> >> Kris >> >> >> On Mon, Jul 15, 2013 at 11:49 AM, Saba <sabap...@gmail.com> wrote: >> > Thanks a lot Kris. >> > >> > I am new to android platform.I wonder how an app without internet >> permission >> > (It has only Storage permission) can upload a file or connect to >> internet? >> > Could you please explain me little bit? >> > >> > >> > Thanks & Regards, >> > Saba >> > >> > >> > On Sunday, 14 July 2013 20:09:33 UTC+5:30, Kristopher Micinski wrote: >> >> >> >> It depends on where the data is stored, if it's encrypted, etc... >> >> >> >> If the information is stored on USB (external) storage, then it is >> >> absolutely possible that your information would be taken and put on >> >> the internet. >> >> >> >> Kris >> >> >> >> >> >> On Sun, Jul 14, 2013 at 2:49 AM, Saba <sabap...@gmail.com> wrote: >> >> > Hi Experts, >> >> > >> >> > Hope you are doing well... >> >> > >> >> > I have many apps which has ONLY Storage (details given below) >> permission >> >> > and >> >> > I save & access important/confidential information using those apps. >> Is >> >> > there way , these apps can upload my data to the internet without my >> >> > permission? >> >> > >> >> > Storage >> >> > modify or delete the contents of your USB storage >> >> > Allows the app to write to the USB storage. >> >> > >> >> > I use a nexus4 running on android 4.2.2. >> >> > >> >> > Thanks, >> >> > Saba >> >> > >> >> > -- >> >> > You received this message because you are subscribed to the Google >> >> > Groups >> >> > "Android Security Discussions" group. >> >> > To unsubscribe from this group and stop receiving emails from it, >> send >> >> > an >> >> > email to android-security-discuss+unsubscr...@googlegroups.com. >> >> > To post to this group, send email to >> >> > android-secu...@googlegroups.com. >> >> > Visit this group at >> >> > http://groups.google.com/group/android-security-discuss. >> >> > For more options, visit https://groups.google.com/groups/opt_out. >> >> > >> >> > >> > >> > -- >> > You received this message because you are subscribed to the Google >> Groups >> > "Android Security Discussions" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> an >> > email to android-security-discuss+unsubscr...@googlegroups.com. >> > To post to this group, send email to >> > android-secu...@googlegroups.com. >> > Visit this group at >> http://groups.google.com/group/android-security-discuss. >> > For more options, visit https://groups.google.com/groups/opt_out. >> > >> > >> > -- You received this message because you are subscribed to the Google Groups "Android Security Discussions" group. To unsubscribe from this group and stop receiving emails from it, send an email to android-security-discuss+unsubscr...@googlegroups.com. To post to this group, send email to android-security-discuss@googlegroups.com. Visit this group at http://groups.google.com/group/android-security-discuss. For more options, visit https://groups.google.com/groups/opt_out.
