Google Introduces Runtime-Only Permissions in Android 8.0 for Better Security

-


One of the best security-oriented changes included in Android 6.0 Marshmallow was runtime permissions. Before the advent of runtime permissions, developers would define permissions in their AndroidManifest file that would be granted automatically upon installation. On Android 6.0 and newer, runtime permissions required the user to explicitly grant or deny a permission through a dialog. From a security standpoint, this ensured that certain sensitive permissions like reading text messages or contacts would need to be brought to the user’s attention before the app could use them.

But there was one major problem: runtime permissions are only enforced for applications targeting Android Marshmallow or newer. So long as the app targets Android Lollipop or older, any runtime permissions would still be automatically granted upon installation. Lots of applications, most notably Snapchat, still do this in order to avoid dealing with runtime permissions. Finally, with Android 8.0 Oreo, Google has introduced a small but very important change to try and fix that in the future.

On April 4th, a commit was made to AOSP that allows permissions to be runtime-only. This change adds a new runtime protection level flag to the Android system that, if set, will only grant certain permissions to apps that target Android Marshmallow or above. Currently the only permission that takes advantage of this new runtime-only flag is ANSWER_PHONE_CALLS, which allows any application with this permission to programmatically answer phone calls on behalf of the user.

Still, it’s a real security improvement for when more and more permissions are restricted under this flag, then apps won’t be able to sneakily grant themselves sensitive or dangerous permissions unless they start targeting a newer version of Android. This will also push app developers to adopt newer APIs and features on their apps, as targeting a newer Android version will become a requirement to use these new permissions.


Source : Xda Forum

Popular posts from this blog

OnePlus Releases OxygenOS 4.5 OTA For OnePlus 3 and OnePlus 3T

-
Image
OnePlus has just announced the release of OxtgenOS 4.5 OTA for the OnePlus 3 and OnePlus 3T. The new update brings in a number of new additions to the stable OxygenOS for these devices, as well as various system stability and battery improvements. Lift up Display, a feature previously limited to the OxygenOS beta channel has now finally made it to the stable version with this new update. That means users can now peek at their notifications simply by lifting the device up from the surface, without actually waking up the device by double tapping the screen or pressing the power button. The new update also adds a Gaming Do Not Disturb mode to help gamers better focus on their gameplay by effectively blocking out heads-up notifications and sounds. This last addition has been in the stable ROM of the OnePlus 5 since the device arrived, so it’s nice to see it get to the hands of OnePlus 3 and 3T owners. Other notable changes include the ability to show network speed in the st
Read more

Report: Incredibly Accurate GPS Chips are Coming to Smartphones Next Year

-
Image
GPS on smartphones today can be hit or miss for a lot of people. There are times in which it is actually right on point, but then there are other times that it seems to pin you on a completely different street, usually taking far too long to correct itself. Android has tried to improve this by triangulating your location from a number of sensors including GPS, WiFi, Cellular, etc. However, this issue could be coming to an end soon as Broadcom has just unveiled a new GPS chip that is said to bring 30-centimeter accuracy. Most GPS chips in smartphones today claim to be within 5 meters of accuracy when it comes to determining your location. As mentioned, Android tries to improve this by using data from other components in your smartphone. For instance, you’re only using the GPS sensor in your smartphone if you have the location mode set to Device Only. A lot of people will bump this up to Battery Saving mode though and it will try to figure out your location using WiFi, Blueto
Read more

Black Friday saw the lowest price yet for the Roomba j7 from iRobot.

-
Image
  Prices for the iRobot Roomba j7 series have reached record lows. With the Roomba j7 being $250 less expensive than usual, and the Roomba j7+ being $200 less expensive. https://linkjust.com/lKbjkgDZ59WMURB3L2omZ    The auto-empty dock is the only difference between these two variants. The auto-empty dock for the Roomba j7+ is included, and it can keep enough dust and debris for the robot vacuum to run for nearly two months. Unless you add the Roomba Combo j7, the Roomba j7 is still the most recent robot from iRobot. It was released over a year ago. The guarantee that iRobot provided helped the j7 gain a lot of popularity. Pet poop avoidance is guaranteed by iRobot, or they'll replace the j7 series for nothing. Its P.O.O.P. policy, which stands for Pet Owner Official Promise, includes this. But it must be pretty good if iRobot is so certain that it will avoid pet waste, right? It is.    Additionally, the j7 boasts "PrecisionVision," a revolutionary system integrated insid
Read more