Gregory M <[email protected]> writes: > I have specifically denied access to contacts (via settings - apps), yet > when I tap on an email in the list of emails I still see the contact.
Make sure you are keeping separate the concept of k-9 being able to access the contacts database, and k-9 sending an intent that opens that contact in the contacts app. Android is pertty fluid about switching apps on the back stack, so what seems to be 'in k-9' may not be. When I click on an email address (in From:) in k-9, the contacts app opens and displays that contact. Clicking back once gets me to the main contacts activity, and again gets me back to k-9. > I feel this is a security risk. I do not like apps having access to my > contacts list. There is no need other then to add "convenience" features. Up to you, but I see it differently; the problem is not so much apps having access as running apps that are untrustworthy. k-9 is an honest open source program that does what it says, so the risk is almost entirely about exploitable bugs. By "convenience", you presumably mean the ability to send mail to someone by starting to type and getting completion on email addresses? And only getting new mail notifications from addresses in one's contact list? > How do I prevent this? For me, this is a deal breaker. If you have denied access to contacts in your OS, and there is still access (which is far from established), then you have an OS bug. Since you are so concerned about contacts, then surely you are not using any cloud contact storage not using or even having installed any google play services not having installed any vendor-provided bloatware not installing any proprietary software apps (not directly relevant here) and therefore you must have a google pixel or equivalent and be running lineageos (or something very similar). If there really is a contacts access security bug, I'm sure they would want to know about it. -- You received this message because you are subscribed to the Google Groups "K-9 Mail" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/k-9-mail/rmid0gpv6nr.fsf%40s1.lexort.com.
