55 comments

  • captn3m02 days ago
    The ACTION_MAIN loophole has been written about before: <a href="https:&#x2F;&#x2F;commonsware.com&#x2F;blog&#x2F;2020&#x2F;04&#x2F;05&#x2F;android-r-package-visibility-holes.html" rel="nofollow">https:&#x2F;&#x2F;commonsware.com&#x2F;blog&#x2F;2020&#x2F;04&#x2F;05&#x2F;android-r-package-vi...</a><p>Google refuses to patch this. I wonder what would happen if you submit it to the Android VDP as a permission bypass.<p>There’s also this SO question by the author about the bypass: <a href="https:&#x2F;&#x2F;stackoverflow.com&#x2F;q&#x2F;79527331" rel="nofollow">https:&#x2F;&#x2F;stackoverflow.com&#x2F;q&#x2F;79527331</a>
    • fluidcruft2 days ago
      It seems like the ACTION_MAIN loophole could be fixed (eventually) if apps that declare it are required to actually be launchers. It seems like legitimate integrations should have more specific intents.<p>At that point, Android prompting if random game you just downloaded should be your defaut launcher seems pretty dangerous interaction for sneaky apps to risk. They either cause the user to bounce and report or the fools select it as default launcher, replace their launcher, can&#x27;t provide the launcher functionality and break the user&#x27;s home screen and end up getting reported in Play Store. I also assume actually getting published as a launcher-class app at that point brings automated testsuites and other requirements that will be burdensome for developers.
    • 3abiton2 days ago
      &gt; Google refuses to patch this.<p>That&#x27;s why projects like XPL-Extended (and previously XPrivacyLua), are an absolute need. I never run an android phone without these.
      • rollcat2 days ago
        &gt; If there is one leap that the infosec community consistently fails to make, it is this: people who are not like me, who have different needs and priorities, who have less time or are less technical, STILL DESERVE PRIVACY AND SECURITY.<p><a href="https:&#x2F;&#x2F;hachyderm.io&#x2F;@evacide&#x2F;114184706291051769" rel="nofollow">https:&#x2F;&#x2F;hachyderm.io&#x2F;@evacide&#x2F;114184706291051769</a>
      • ignoramous2 days ago
        XPrivactLua and other XposedMod&#x2F;Magisk extensions break open the app sandbox. It is better to restrict running those on usereng&#x2F;eng builds (test devices). For prod builds (user devices), I&#x27;d recommend using <i>Work Profiles</i> (GrapheneOS supports upto 31 in parallel) or Private Spaces (on Android 15+) to truly isolate apps from one another.
        • v1ne2 days ago
          The question is: Who is the beneficiary of the app sandbox? Is it you, the user, because no malicious processes can taper with your apps? Or is it the corporations, because they prevent you from modifying their apps – which makes you a pure consumer?<p>I think, for the tech-savvy, the latter is more accurate and I think it is very important to be able to crack open these sandboxes and tinker with processes. Be it to inject ad blockers, automate them, modify their appearance, etc. It should be a right of a user to be able to do these things.
          • subscribed2 days ago
            I, the user.<p>Malicious apps sneak through the vetting process all the time.<p>Genuine, honest apps have to process unsafe content (be it we pages, messages) all the time.<p>One exploit should at most make single App vulnerable, not expose <i>everything</i> I have on my phone.<p>Strong, restrictive sandboxing, memory and execution protections are the only safe way.<p>And how is destroying the sandboxing related to having more rights as a consumer? You could still patch and repack them in the way Lucky Patcher does with ads, for example?
          • ignoramous2 days ago
            &gt; <i>I think, for the tech-savvy, the latter is more accurate and I think it is very important to be able to crack open these sandboxes and tinker with processes</i><p>Anyone tech-savvy that wants to mod their Android (like they&#x27;d mod Linux distros), should consider purchasing Android devices (like Pixel) that support ownership transfer (that is, unlocking then relocking the bootloader), and flash CalyxOS&#x2F;GrapheneOS usereng&#x2F;eng builds.
        • subscribed2 days ago
          Can&#x27;t wait for App List Scopes, like we have with Contacts or Storage already. Not a day too early.<p>For a few months all the UK banks I have accounts in send the list of all apps to the mothership.<p>I noticed it first when suddenly Revolut refused to start up because I had an app installed, Natwest and Nationwide at least inform prior to the data collection, but weren&#x27;t concerned.<p>It ended up with the long overdue confinement of all the banking apps in their dedicated profile, but I&#x27;d love to be able to confine them further.
          • HenryBemis2 days ago
            You mentioned NatWest. I remember using NatWest and noticing on NoRoot Firewall (on my Android) it was &#x27;speaking&#x27; regularly to Facebook. Of course I had all FB and IG and their IP ranges blocked from the get-go, but still. Why (TF!!!!) would my effing back telling FB that I launched their app? (one could say that they use this or that library, so the code, blah blah blah)<p>This is disgusting and the reason I don&#x27;t use iOS. The utter lack of firewall! (plus the batterygate scandal)
        • saturnite2 days ago
          I&#x27;m on Android 14 and I&#x27;ve been pretty happy with an app called Insular on F-Droid or Island on the Play Store. It let&#x27;s you install as many instances of an app as you&#x27;d like and they&#x27;ll show up in the work profile, ignorant of the others&#x27; existence.
          • 1oooqooq2 days ago
            it&#x27;s a frontend to work profiles feature.<p>not recommended to run insular anymore. use Shelter for a14
        • pava02 days ago
          What do you mean by &quot;break open the app sandbox&quot;?
          • schnatterer2 days ago
            I found this description about the security risks of rooting very eye-opening <a href="https:&#x2F;&#x2F;madaidans-insecurities.github.io&#x2F;android.html" rel="nofollow">https:&#x2F;&#x2F;madaidans-insecurities.github.io&#x2F;android.html</a> It also explains the sandbox.
            • dataflow1 day ago
              That link seems to have... an agenda. It&#x27;s way too hand-wavy (e.g., it doesn&#x27;t at all attempt to tease out the nuance of whether a rooted phone inherently has a broken security boundary by design, or whether [like on Linux] it&#x27;s secure as long as the implementation is non-buggy) and seems laser-focused on convincing users that desire sovereignty over their own devices that they might as well jump off a cliff.
            • schnatterer22 hours ago
              I&#x27;d like to add one more finding about the perils of root access: <a href="https:&#x2F;&#x2F;github.com&#x2F;chenxiaolong&#x2F;my-avbroot-setup&#x2F;blob&#x2F;c52e44de6e225f66b012cea127de7ad6ddf96fcd&#x2F;README.md#uid-0" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;chenxiaolong&#x2F;my-avbroot-setup&#x2F;blob&#x2F;c52e44...</a><p>&gt; The term [rooting] generally also includes the functionality for making runtime code patches (eg. with Zygisk) and making runtime filesystem modifications (eg. Magisk modules).<p>&gt; Out of the many root-enabled apps I&#x27;ve studied or reverse engineered, the vast majority fail to handle arbitrary inputs properly (especially filenames). For example, some root-supporting file managers turn a seemingly benign action like listing a directory into local privilege escalation. This is trivially exploitable, especially with browsers auto-downloading files with server-provided filenames to &#x2F;sdcard&#x2F;Download&#x2F;.<p>To avoid repeated root access UI prompts, some apps spawn a long-running shell session, write commands to stdin, and rely on parsing stdout and searching for the shell prompt to determine when commands complete. This approach is prone to desync, which can lead to commands being skipped or other inputs being interpreted as commands.<p>All in all, I simply do not trust most root-enabled apps to not leave a gaping security hole, so I avoid them entirely. There are apps that do handle root access in what I would consider a more proper way, by spawning a daemon as root and then talking to the daemon over a well defined binary protocol. Unfortunately, this approach is the extreme minority.
            • hilbert421 day ago
              As <i>dataflow</i> says that site has an agenda. I&#x27;ve used rooted phones continuously since Android v4 and I&#x27;ve had no trouble. Moreover, I&#x27;d posit that much of the crap I remove from phones lowers the attack risk which to some degree offsets the risk of rooting.<p>Granted, I&#x27;m not suggesting that everyone should root their phones, in fact in recent years I even stopped suggesting it to my tech-savvy friends (that is unless they approach me for advice).<p>I don&#x27;t need to lecture about these things but all those who&#x27;ve rooted their phones know the huge advantages—power and control one has over one&#x27;s phone is enormous.<p>For example, some apps contain so many trackers that normally you&#x27;d never use them except they&#x27;re the only apps suitable for one&#x27;s purpose. Rooting allows you the user to take control and have them do what you want and not that of the developer.<p>Yes, rooting has its risks but for my purposes its benefits far outweigh them.
            • Madaidan&#x27;s articles are well-known to be centered around &quot;security at all costs&quot;, and often at the cost of user freedom. That&#x27;s just not a realistic take when it comes to privacy. What good is absolute security if all it does is secure the device from your &quot;tampering&quot;? Sure, it would be nice if the device were highly secure, but I&#x27;d rather it stop spying first.<p>With absolute security, you can rest assured that only Google has access to all of your data, and only Google is allowed to turn off the siphoning.
            • schnatterer22 hours ago
              As someone who cherishes the power of root privs, I&#x27;d still like to make a point for alternative solutions that came up like distros such as GrapheneOS or CalyxOS or non-root filtering options via VPN. If it weren&#x27;t for backups I could manage my everyday life without root. For all other cases I would root and later unroot my phone via an OTA update :D <a href="https:&#x2F;&#x2F;github.com&#x2F;schnatterer&#x2F;rooted-graphene&#x2F;" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;schnatterer&#x2F;rooted-graphene&#x2F;</a><p>Hopefully GrapheneOS deliver on their promise to provide a better backup solutions than seedvault.
            • ignoramous2 days ago
              A more recent (2023) sandboxing + isolation overview by the Android team: <a href="https:&#x2F;&#x2F;arxiv.org&#x2F;html&#x2F;1904.05572v3&#x2F;" rel="nofollow">https:&#x2F;&#x2F;arxiv.org&#x2F;html&#x2F;1904.05572v3&#x2F;</a> (section 4.3)
              • NotPractical1 day ago
                &gt; Android’s security design has fundamentally been based on a multi-party authorization model: an action should only happen if all involved parties authorize it.<p>&gt; these are user, platform, and developer (implicitly representing stakeholders such as content producers and service providers). Any one party can veto the action.<p>How is this not anti-user? It explicitly states that the app developer should be able to veto my decisions...
                • ignoramous1 day ago
                  Under the shared responsibility model, such veto makes sense. Just because the end-user (the app has no way to determine if it was a thief or a spy or a monkey or the actual device owner) approves of an action doesn&#x27;t mean the OS and the app <i>have</i> to grant authorization.<p>I can see how such a setup is hostile to power users, but then Android is used by 50% of all humanity, and your guess is as good as mine as to just how many want &quot;sudo make me a sandwich&quot; level of control.
    • nexle2 days ago
      Thanks for the link, seems like the loophole is already there since the introduction of the package visibility restriction, and almost everyone and their mother knows how to bypass this restriction.<p>&gt; Google refuses to patch this<p>While I don&#x27;t believe Google engineers are not aware of this widely used loophole, do you have any source that they refused to fix it?
      • AznHisoka2 days ago
        That loophole was published 5 years ago, it hasnt been fixed since.<p>Do you need someone from Google to explicitly write an official note, notarized, indicating they are refusing to fix it?
        • ignoramous2 days ago
          &gt; <i>refusing to fix it</i><p>Google addressed similar isolation concerns (without breaking a tonne of APIs in incompatible ways) with Private Space and Work Profile: <a href="https:&#x2F;&#x2F;source.android.com&#x2F;docs&#x2F;security&#x2F;features&#x2F;private-space" rel="nofollow">https:&#x2F;&#x2F;source.android.com&#x2F;docs&#x2F;security&#x2F;features&#x2F;private-sp...</a>
          • whs2 days ago
            If it&#x27;s a security issue fix, they should release it in one of the monthly security patch.<p>I also think that private space do not fix the underlying issue. If you have four apps and you don&#x27;t want them to know about each other you can put one of them in main profile, work profile, app locker and you run out of profile for the last one. The way app locker work doesn&#x27;t scale to tens of sandbox.
            • subscribed2 days ago
              I know you didn&#x27;t ask for this sort of answer, but you could use user profiles for this.<p>You can have more users on the &quot;standard&quot; AOSP Android as well, but with a certain AOSP-derived you can also have notifications forwarding.<p>Until they add Application List Scopes (I believe it&#x27;s on the road map), in the exactly the same way users can now lie to apps they have only specific contacts in their contact list and only one or two specific folders in the Storage.
          • 1oooqooq2 days ago
            that proves bad faith.<p>they keep releasing overly complicated features to sidestep the obvious reported vulnerability, to silence power users and please corporate enterprise sysadms.<p>the rest of the 99.9 of users keep the vulnerability, which is very profitable for ad networks. wonder why an ad networks who maintains android would do that.
    • ErigmolCt2 days ago
      Submitting it to the Android VDP is a solid idea, though I wouldn&#x27;t be surprised if it gets waved off as &quot;working as intended.&quot;
      • gregw22 days ago
        The right (&quot;as intended&quot;, in my view) functionality would be to support a manifest with, say, five apps, and if as a dev you wanted more youd apply to google for an exception (like aws limit increases) with a list of reasons for each app.
        • TeMPOraL2 days ago
          I know people may not remember this, but Android was initially designed with <i>interoperability</i> in mind. It&#x27;s sad to see both the system development and the community opinion to have turned against it so hard.
    • izacus2 days ago
      What do you mean with &quot;refused to patch this&quot;? Google will reject any app publishing attempt that asks for that filter and isn&#x27;t a launcher on Play store.
      • whatevertrevor2 days ago
        How is that congruent with the article&#x27;s claim that 31 out of 47 apps they tested had this filter?
        • izacus2 days ago
          No idea, but we did have apps rejected because of similar permissions.
          • cAtte_2 days ago
            &quot;similar&quot;. so what you said isn&#x27;t true then?
      • jim2012 days ago
        Author claims that this same hack is used widely, including by apps on the Play Store like Snapchat and Facebook.
      • Mindwipe2 days ago
        The HSBC bank app uses this and is in the Play Store.
  • turblety2 days ago
    I still, will never understand the need for native &quot;Apps&quot;. To this day, I have never seen an &quot;App&quot; that couldn&#x27;t simply have been a website&#x2F;webapp. Most of them would likely be improved by being a webapp.<p>The only benefits I can see of &quot;Apps&quot;, are the developer get&#x27;s access to private information they really don&#x27;t need.<p>Yeah, they get to be on the &quot;App Store&quot;. But the &quot;App Store&quot; is a totally unnecessary concept introduced by Apple&#x2F;Google so they could scrape a huge percentage in sales.<p>Web browsers have good (not perfect) sandboxing, costs no fees to &quot;submit&quot; and are accessible to everyone on every phone.
    • xxprogamerxy2 days ago
      Simple, UX.<p>The reality is, most webapps for mobile just suck. The UX is nowhere near that of a native application. I don&#x27;t want any text to be selectable. I don&#x27;t want pull to refresh on every page. I don&#x27;t want the left-swipe to take me to the previous page.<p>You can probably find workarounds for all these issues. The new Silk library (<a href="https:&#x2F;&#x2F;silkhq.co&#x2F;" rel="nofollow">https:&#x2F;&#x2F;silkhq.co&#x2F;</a>) is the first case I&#x27;ve seen that get&#x27;s very close to a native experience. But even the fact that this is a paid library comes to show how non-trivial this is.
      • fauigerzigerk2 days ago
        <i>&gt;I don&#x27;t want any text to be selectable. I don&#x27;t want pull to refresh on every page. I don&#x27;t want the left-swipe to take me to the previous page.</i><p>Strange. This inability to select any text has always felt like one of the most hostile things developers could ever do. It feels like pure vandalism.<p>Another thing that causes massive productivity degradation is not being able to keep multiple pages open so you can come back to some state. I cannot imagine how anyone could possibly use these apps for any serious work.<p>The UX of almost all native mobile apps is absolute crap. But it&#x27;s not their nativeness that makes them crap. I&#x27;m not complaining about the idea of operating systems offering non-portable but high performance UI primitives that make use of OS facilities.<p>Many native desktop apps don&#x27;t have these UX issues (at least not all of them at the same time). It&#x27;s the mobile UX patterns, conventions and native UI frameworks that are causing this catastrophic state of affairs.
        • whstl2 days ago
          Inability to select text is a pain in the ass when you&#x27;re midway through learning the language and only wants to translate certain parts. In native apps it&#x27;s understood (app makers don&#x27;t really give a shit about me), but when it&#x27;s in websites it&#x27;s like a slap in the face :)
        • hombre_fatal2 days ago
          Yeah, the app model of one page open at a time ever is such bad UX. Huge regression from the web. Funnily enough you get around it on an app like Reddit by opening pages in the web browser.
        • umbra0718 hours ago
          &gt; Strange. This inability to select any text has always felt like one of the most hostile things developers could ever do. It feels like pure vandalism.<p>Use Circle to Search? Native capability that works on every single app, and is close to perfect (with the exception of handling text at the very bottom&#x2F;top of your screen that&#x27;s covered by your navbar&#x2F;Google logo).
        • herrvogel-1 day ago
          Every time I try to select a single word in a WhatsApp message I surprised for a second. It’s so strange that most apps that have text as their fundamental content don’t allow you to do this.
        • criddell2 days ago
          On modern mobile and desktop operating systems, you can always copy that portion of the screen to the clipboard and it will recognize the text so you can paste it anywhere.
          • mattl2 days ago
            I’ve noticed that apps can tell when you’re taking a screenshot and often will pop up a little message first which appears in the screenshot.<p>Reddit on iOS was one that did it.
        • tshaddox2 days ago
          Also, if my memory serves, native MacOS apps by default support selecting most text that isn’t part of a clickable element like a button.
          • OrangeMusic1 hour ago
            No, that&#x27;s absolutely not the case, and it would be very odd and disturbing.
      • mojuba2 days ago
        To be fair, browser apps do have their advantages:<p>- text is selectable<p>- content is zoomable<p>- you can have an ad&#x2F;nuisance blocker<p>- page source is open<p>While native apps have their own advantages:<p>- much smoother experience esp. navigation, scrolling, animations, etc.<p>- better overall performance (JavaScript will always lose to the native binary)<p>- access to hardware opens new possibilities; audio, video accelerators etc.; there&#x27;s a ton of things you can&#x27;t do in the browser with audio for example<p>- widgets, some of them are nice and useful too<p>- for publishers: an app icon on the home screen is a reminder, a &quot;hook&quot; of sorts; this is the main reason they push apps over web versions
        • blacklight2 days ago
          All the features you mentioned can also be achieved by a well developed PWA. Of course, minus the widgets or some deeper system integration (like controlling phone calls etc.)
          • mojuba2 days ago
            Try to build a more or less serious music synth in the browser that won’t kill your battery.
            • firtoz2 days ago
              Heh, I was actually building one. Haven&#x27;t considered the battery... Are the web audio APIs bad, or are you forced to use the CPU? I guess with webgpu it may be easier?
              • mojuba2 days ago
                I think on iOS you need access on the CoreAudio level if you want to be efficient, ie fill audio buffers on a high priority thread with some lower level static language.
        • divan2 days ago
          &gt; browser apps do have their advantages:<p>These are more like byproduct of the fact that web apps are built on the stack not suited for modern UI apps. It&#x27;s literally a text typesetting engine pretending to be a rendering engine for high-performance UI.<p>So, it can also be framed as:<p>- everything is selectable, even what shouldn&#x27;t be - buttons, drawers, video players, etc - content is zoomable, which most of the time just breaks UX in hilariuous ways. Developers have to do extra-work to either disable zoom or make hacks&#x2F;workarounds.<p>&quot;Everything is selectable&quot; and &quot;everything is zoomable&quot; makes total sense if it&#x27;s a blog post. If it&#x27;s a UI for the modern app, it does not.
          • rblatz2 days ago
            Disabling zoom is so hostile, why not disable screen readers and put bollards on handicapped ramps while you are at it. It’s literally a middle finger to older people and people with vision issues. If you disable zoom I will not be using your website.
            • divan1 day ago
              Luckly most popular operating systems have concept of global text size that can be adjusted, and non-web UI frameworks respect that.
          • mvdtnz1 day ago
            &gt; It&#x27;s literally a text typesetting engine pretending to be a rendering engine for high-performance UI<p>This is an outdated view of the web. Catch up or be left behind.
            • divan1 day ago
              This is factual view. No matter how many layers of abstraction you put on top, the foundation is always there. Luckily we have better and better support for wasm in browsers, so it&#x27;s a matter of time when this outdated stack will be replaced with solutions designed from the ground up for the task.
          • nsonha1 day ago
            Web just have defaults that are not suitable for apps. Disable text select is one line of css, not that hard.
        • octacat1 day ago
          + working notifications - adblocker is more of a minus for publishers though<p>But mainly don&#x27;t expect any good web app integration on mobile, because it would hit the store 30% tax.
      • leipie2 days ago
        As a user I usually want all of those features to work. I regularly get ticked off at apps, because I cannot copy paste like in the browser or the app just closes (and loses all state) because I tried to use the back button. I also encountered apps that just reset, because I dared switch to another app for a second because I wanted to copy paste something into it...
      • nodar862 days ago
        &gt; I don&#x27;t want any text to be selectable<p>Disabling text selection is not just worse UX, it is actively user-hostile
        • divan2 days ago
          In Photoshop panels, title (like &quot;Layers&quot;) are not selectable. How is it worse UX or user-hostile?
        • IshKebab1 day ago
          It&#x27;s worse <i>on desktop</i>. On mobile it just leads to accidental selection when you were trying to do something else.
        • crazygringo2 days ago
          I have literally never needed to select text in a UX element.<p>In the past, occasionally there would be an error message in a message box dialog that I wanted to copy and paste. And then I discovered that despite it not looking selectable, it actually was.<p>I don&#x27;t want to accidentally select the text of my menu bar, or of a text box label, or a dialog tab title.
          • sitkack1 day ago
            I, I, I. Empathy is a weakness.<p>Lots of limitations for you to not accidentally do something, maybe there is a way to not accidentally do those things and also help people that need them.
            • crazygringo1 day ago
              No, not providing concrete examples is a weakness.<p>You&#x27;re awfully arrogant in making a judgement about my empathy... if you want to make this personal.<p>Or maybe you can justify why people need to be able to select menu labels in the first place? That&#x27;s not standard on any OS I&#x27;ve ever used, so it&#x27;s up to the person who wants to change things to justify why.<p>Maybe be less judgmental of people here on HN, and contribute something factual instead? I at least gave a factual account of my personal experience, which is a data point. Describing one&#x27;s experience isn&#x27;t egoism.
              • nazgul171 day ago
                A simple and concrete example is, go to Japan, find yourself in need of using any Japanese-only app, be extremely frustrated in not even being able to select text to translate it.<p>At least in recent versions of Android there is that OCR (?) powered functionality to select text when you&#x27;re in switch-app view.
                • umbra0718 hours ago
                  Circle to Search can translate everything on your screen without you needing to go through the whole &quot;copy text, open Translate, paste, switch back to app&quot; workflow. You just hold the home button, then press the translate button.
                • crazygringo1 day ago
                  Thank you for the example!<p>I would suggest that these days you&#x27;d be much better off taking a screenshot and putting that into Google Translate.<p>That way all the text remains in-place, and you can keep it as a visual reference to refer to.<p>If you were selecting text, it would wind up in a kind of jumble that would be much harder to use.
      • Aerroon2 days ago
        Most <i>apps</i> for mobile suck too. A lot of them are worse because they are not in a web browser, eg YouTube or Reddit or similar apps that work via urls.<p>Browsers are some of the very few apps that work well on a phone. Most of the other ones feel like a mess (except games I guess).
      • ffsm82 days ago
        Mmh, the examples you&#x27;ve listed are actually super easy to do if you&#x27;re using a framework such as angular with it&#x27;s plugins for pwa and touch controls. And prolly tailwind for css&#x2F;disabling selection if you <i>really</i> want to, but I&#x27;d call that an anti feature in almost all cases.
        • xg152 days ago
          In theory. In practice not so much.<p>I&#x27;ve had enough browser apps try that on my phone. Usually they start to lag out and become unbearably slow due to the framework bloat, compared to native apps that have no such issues.
      • jonplackett2 days ago
        You have to wonder about the motivations of the company making the browser that makes it impossible to disable some of these things, and therefore makes real apps so much superior (like swipe to go back on safari - I have never ever swiped back intentionally in over 100000 swipe backs).
        • jodrellblank2 days ago
          “I have never wanted to type the letter ‘e’ in any of the 100,000 times I hit the ‘e’ key on the keyboard; it’s always felt suspicious to me why keyboards even have an ‘e’ key which can’t be disabled” said the perfectly normal hacker news commenter.
        • rezonant2 days ago
          &gt; I have never ever swiped back intentionally in over 100000 swipe backs<p>Real question here, what are you <i>trying</i> to do when you &quot;swipe back&quot;?
          • miramba1 day ago
            Touching something on the left side, like a link, and let my finger touch the glass a tiny bit too long while pulling the finger back. Unwanted swiping happens to me all the time in all directions - may the developers use a touch screen for everything forever!
          • bluedino2 days ago
            Dating apps.<p>By instinct I swipe back like I am in Safari, and that does something else in those.
          • nsonha1 day ago
            This swipe thing violates one of the most basic ux principles by making a destructive action easily triggered by accident.
          • jonplackett1 day ago
            Swipe UP
      • The &quot;pull to refresh&quot; is probably the most annoying one.<p>Other than that, I&#x27;d like text to be selectable! I don&#x27;t like it when apps don&#x27;t allow you to copy text.<p>I use Copy [1], and when that doesn&#x27;t work I use the OCR text selection feature on my Pixel phone.<p>[1] <a href="https:&#x2F;&#x2F;play.google.com&#x2F;store&#x2F;apps&#x2F;details?id=com.weberdo.apps.copy">https:&#x2F;&#x2F;play.google.com&#x2F;store&#x2F;apps&#x2F;details?id=com.weberdo.ap...</a>
      • silisili2 days ago
        That&#x27;s funny, I use Amazon on mobile web, my wife insists on the app.<p>Guess which one of us has way more problems, due to both functionality and a constantly changing layout?
      • wiseowise2 days ago
        UX is when you have less features - got it.
      • blacklight2 days ago
        It doesn&#x27;t sound like anything that a PWA (paired with some a sync mechanism like Websockets) can&#x27;t solve. And with WebAssembly the convergence is even more compelling.
      • sota_pop2 days ago
        To go along with this UX argument: it’s always been my perception that native apps often lean towards a stateful design while web apps try for stateless. Maybe that’s too abstract (read - incorrect), but was always just where my intuition landed.
      • andoando2 days ago
        Nothing prevents fhe same UI being available in web though.<p>Iconic mirrors a lot of it, but Apple&#x2F;google could have just as easily made them native components triggered in the browser
      • starfezzy2 days ago
        That is not an objection. Two decades of webapp progress instead of native app progress would have (and still would) addressed all of that.
      • buyucu2 days ago
        webapp UIs suck because nobody cares about them. They could be a lot better.
    • jb19912 days ago
      This is a bizarre take. Are you also suggesting there’s no reason to have a native app on a laptop? Because it’s essentially the same question. There are many things which a native app can do that a browser just cannot do well, or at all. I don’t know what your needs are, but for example if you’re doing heavy video or audio editing, accessing heavy amounts of RAM or utilizing GPU compute or doing other things on the bare hardware, doing that all from a browser is definitely not there yet.
      • nsonha1 day ago
        On desktop you do productive work, your apps need native capabilities. On mobile, apps are primarily consumption, displaying, browsing... no complex interactions.
        • jb19911 day ago
          Lots of people use iPads for content creation. I think your worldview on this topic is a bit narrow. There have also been multiple feature length movies shot on an iPhone, at least two of them by Oscar winning directors! Those weren’t done on a mobile browser.
          • autoexec23 hours ago
            ipads are designed primarily for consumption not creation. I&#x27;m sure lots of people manage create something on an ipad anyway but that doesn&#x27;t mean it&#x27;s a good tool for the job. Filming a movie on an iphone is just using the camera. I&#x27;d be very surprised if anybody making a full length movie with their iphone edited that film on their phone or an ipad.
            • jb199121 hours ago
              &gt; Filming a movie on an iphone is just using the camera.<p>Not really. And this is why native apps are necessary. You can&#x27;t use the built-in camera on an iphone successfully in this way, and I don&#x27;t know any director who has. They use specialized third-party apps which give them the appropriate control.
          • nsonha17 hours ago
            &gt; Lots of people use iPads for content creation. I think your worldview on this topic is a bit narrow<p>Can we stick to &quot;by and large&quot;? Every year many youtubers make that video of trying to use ipad&#x2F;samsung dex as the productive computer for a day. Last I checked they always end the same way.
    • setopt2 days ago
      &gt; I still, will never understand the need for native &quot;Apps&quot;. To this day, I have never seen an &quot;App&quot; that couldn&#x27;t simply have been a website&#x2F;webapp.<p>In cases where a native app and web app are both available on iOS, there’s often a huge difference in battery usage and sluggishness. Also, as a sibling poster mentioned, I like having fully “offline” apps as well, for example for maps and notes.<p>I’m not saying that I like how Apple and Google have done this in practice, but I don’t think going webapp-only is the future. For the same reason I won’t replace my real computer with a Chromebook for the foreseeable future.
      • wodenokoto2 days ago
        When the iPhone came out, you had full offline access on PC to Gmail and google docs using Google Gears.<p>Google Gears got deprecated because something something move to standard HTMl and browser features and now we don’t really have any offline web apps.<p>The ability to have non sluggish, offline web apps has existed for decades now, but the interest from providers has been declining and the understanding that this is possible is also declining on the consumer side.
      • wiseowise2 days ago
        &gt; In cases where a native app and web app are both available on iOS, there’s often a huge difference in battery usage and sluggishness.<p>Yeah, like single native instagram draining battery faster than combination of multiple websites that I visit in Safari.<p>&gt; For the same reason I won’t replace my real computer with a Chromebook for the foreseeable future.<p>&gt; real computer<p>Where most of the modern applications are either web wrappers or Electron apps.
        • alabastervlog2 days ago
          I’m still bitter about Apple backing off their stance against using web tech in apps. Most apps that are really bad, are really bad because they’re just wrapping websites.
        • carlosjobim2 days ago
          &gt; Where most of the modern applications are either web wrappers or Electron apps.<p>Only if you&#x27;re stuck on a depreciated platform like Linux. If you are on Mac, native applications – real applications – are much more powerful and usable than any web wrapper on Linux.<p>I&#x27;ve noticed Linux users have taken a habit of proposing their broken way of using a computer through the browser for other platforms as well. But on other platforms we are already spoiled with quality software.
          • rlpb2 days ago
            Native applications are way better on Linux, too. But only where they exist. There are plenty of &quot;apps&quot; where there developers have taken shortcuts by getting &quot;Linux support&quot; by using Electron. These app perform noticeably worse and are generally disliked by their users.
          • mattl2 days ago
            Good native Mac apps are on the decline too.
            • carlosjobim1 day ago
              What are you missing?
              • mattl1 day ago
                I was lamenting the lack of native UI in Blender last night.<p>I’ve been using Nova for the last few years. Increasingly native non-Xcode development tools seem to be few and far between. I have BBEdit and Nova, but a lot of people have switched to VS Code it seems.
      • jampekka2 days ago
        PWAs can be fully offline. Are you sure you understand what you criticize?
        • jtrn2 days ago
          Have you tried building PWAs for large user bases?<p>Here are some of the frustrations I had with PWA&#x27;s.<p>There are massive differences between browsers and Android&#x2F;iOS when it comes to storage, access to local files, and size limitations. Proper backup&#x2F;sync of large files using IndexedDB, Cache API, or localStorage is not as straightforward as native storage.<p>Service workers aren’t designed for complex or long-running computations, But they’re more like lightweight assistants, and you would have a HUGE pain trying to accommodate all the different browser&#x2F;OS limitations if you need predictable background sync&#x2F;backup. This seems maybe to be better going forward due to frameworks like Ionic&#x2F;Capacitor or Workbox.js tho.<p>PWAs are tethered to the web’s security model, which means they’re generally restricted to HTTP and HTTPS for communication. This limits direct access to protocols like SMTP (email) and FTP (file transfer). You’re stuck with web-friendly options like WebSockets or WebRTC, or you’ll need a server to act as a middleman. Building a torrent client would be really annoying due to the limited protocol access. The WebTorrent JavaScript framework, which can run in the browser, does not fully support traditional TCP&#x2F;UDP torrent protocols directly but instead relies on WebRTC data channels. Therefore, your app will only connect to peers supporting WebRTC, which significantly reduces available torrents and peer counts. Also, there often is an added level of restriction to background processes on mobile.<p>There are also limits to access of the devices APIs: - NFC (partial Web NFC support in Android Chrome) - Bluetooth (Web Bluetooth limited to Chrome Android, absent in iOS) - Native contacts, SMS inbox, telephony, or system-wide calendars. - Some system-level sensors (barometer, precise accelerometer data).<p>Also: Web apps often perform slower on heavy graphics or computation than native apps due to lack of direct GPU access. I have not tested this myself, but I know this has gotten better.<p>Onwards: - PWAs can&#x27;t directly register as the default handler for specific file types or URL schemes across the OS. - PWAs cannot reliably run background tasks (like precise location tracking, audio playback, VoIP callbacks, or continuous data monitoring) when inactive. - WebAuthn supports biometrics, but native biometric APIs (like Face ID&#x2F;Touch ID) offer deeper integration for specific app functionality. This is a HUGE need for our firm, as we rely on it for easy authentication for our app, and customers love it over other authentication methods. - PWAs can&#x27;t easily embed widgets into the OS home screen or system-level UI components like control center integration.<p>YES, PWAs are much more capable than some people think and could, in many instances, work just as well as a native app. (I use GeForce Now on iOS with not many problems.)<p>And this is not even touching on how much easier it is to use Android&#x2F;iOS SDKs to put together an application, and user expectations (which might be WRONG when they think PWAs are lesser or more insecure, but these attitudes are still reality).<p>All that said, I prefer PWA over native myself due to publication freedom, but I get annoyed when you talk down to people, and you seem to be the one that doesn&#x27;t understand that there are actual limitations.
          • jampekka2 days ago
            The post mentioned offline usage for maps and notes. Neither are significantly limited by service workers&#x27; capabilities. Platform differences are annoying indeed, especially due to the deliberate sabotage by Apple.<p>Sure there are limitations to PWAs, but quite a vast majority of apps don&#x27;t need the missing features.<p>I find native Android and especially iOS SDKs vastly more difficult and cumbersome to develop for. Doubly so of course if you have to develop for both. Maybe if you&#x27;re already used to the Android&#x2F;iOS development mess it is easier short term than to learn something new.
    • chme2 days ago
      I get your point partially. All these apps that companies put out in order to collect and manage shopping tokens or to contact their customer service would have been much better as a website.<p>However I still do like to have apps on my devices that just work offline, without distributing my data across services I do not control. And I also do not want to depend on a internet connection, when I am anywhere.<p>I like my offline Osmand&#x2F;Organic Maps app to show me the trails when I am somewhere in the woods or mountains. I like my apps that instead on using some third party server, connect directly to my other local devices to share data.<p>IMO all (where possible) apps should be developed offline first, and only require internet when necessary, and those apps that cannot work without internet should be web apps, they do not need to be on my devices.
      • oarsinsync2 days ago
        It’s totally possible to distribute a webapp that works offline and stores all your data offline too.<p>Platform owners introduce a bunch of restrictions that create reliability and usability concerns, but the standards already exist to enable a website operator to create a webapp that, after the initial ‘install’, runs entirely offline on the user’s device, and has no need to communicate with the website.
        • layer82 days ago
          It’s not really possible in practice, see <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=43522667">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=43522667</a>.
    • rzz32 days ago
      Im sorry. I really just can’t understand or relate to this at all. Mobile web still feels like such a terrible experience, and apps generally don’t. When’s the last time you tried booking a flight on mobile web? And how do you deal with all of the real estate the browser steals? Having to log in every time when the app can just cache my authentication and FaceID me?
      • wodenokoto2 days ago
        Seriously, booking hotels and flights is so much better on the web. You get multiple windows for easy flight and price comparisons, within and between providers.<p>I don’t understand people who use apps for this. It is such a pain.
        • pasc18782 days ago
          You are comparing desktops to phones.<p>I do most things on my desktop for the reasons you say but on a phone multiple tabs etc is a pain.
          • wodenokoto2 days ago
            No, I’m saying that the booking.com app, or the Skyscanner app or any of their competitors don’t support multiple tabs.<p>Their websites do (although even on new phones you are at a greater risc of a tab being purged and needing a reload, but still you can multi tab on the mobile website)
            • pasc18781 day ago
              Ah the difference here is that I can&#x27;t use multiple tabs on my phone as they are too small. So tabs are only relevant to me on desktops and even then I will often use new windows.
        • rzz31 day ago
          I almost always book via apps. I can compare flights by looking at Kayak (app), then actually book it in the carrier app. I think the workflow just has to adapt to the tools you’re using, and trying to follow the same methods you’d use on desktop just don’t work. I don’t think either particular method is objectively worse than the other for every use case.
      • andelink2 days ago
        Not who you replied to, but I more so do not rely on my phone for anything where I would prefer more screen real estate such as doing comparisons like buying flight tickets. I have never bought flight tickets on my phone, only on my computer. I prefer the bigger screen and keyboard for most things actually
      • whstl2 days ago
        <i>&gt; Having to log in every time</i><p>Sounds like a broken web app.<p>You are currently using a webapp that doesn&#x27;t do this. It&#x27;s called Hacker News, and it never asks me to login every time on my phone.<p><i>&gt; when the app can just cache my authentication and FaceID me</i><p>Sounds like a broken login form.<p>Hacker News also allows me to login with Face ID on my phone, thanks to my password manager.<p>Optionally webapps can also provide Passkeys.
        • terinjokes2 days ago
          &gt; Sounds like a broken web app.<p>&gt;<p>&gt; You are currently using a webapp that doesn&#x27;t do this. It&#x27;s called Hacker News, and it never asks me to login every time on my phone.<p>Every time I visit Hacker News on my iPad I&#x27;m logged out. Apple has decided that if you don&#x27;t visit a website often enough it will expire all your cookies for the site.<p>In practice that means I can log in to HN while I&#x27;m at the cafe one weekend and be logged out by the time I visit the next weekend.
          • whstl20 hours ago
            Are you sure? My iPad has been logged on for months... the only that make it log off on the iPad is when I log off on the desktop.<p>Apparently HN does it on purpose and kills alls sessions on all devices when you log off.
        • rzz31 day ago
          Passkeys do definitely make the mobile web experience better, but unfortunately they’re still not widely supported. I’m not saying mobile web apps can’t be good, but a native app allows for a lot of UX optimization.
      • renegat0x02 days ago
        Not so sure. There are a ton of bad apps. They also do not work properly often.<p>Besides companies focus on apps, not on web pages. Less money, less focus, therefore worse experience
      • wiseowise2 days ago
        &gt; When’s the last time you tried booking a flight on mobile web?<p>A week ago, via TravelPerk which is literally a web wrapper.<p>&gt; And how do you deal with all of the real estate the browser steals?<p>What?<p>&gt; Having to log in every time when the app can just cache my authentication and FaceID me?<p>I literally use the same FaceID for my passwords&#x2F;proton pass. Also, this depends on a website.
    • ulrikrasmussen2 days ago
      There are also an increasing number of services which are ONLY available as apps now, including, but not limited to, many financial apps such as Revolut.<p>A big issue with this trend is that unlike the web, the whole Android ecosystem is a walled garden which is strictly controlled by Google. In principle you can run your own custom Android ROM, but in practice this will lock you out from any app which uses Play Integrity API to enforce Google&#x27;s totalitarian regime which dictates what software YOU are allowed to run on &quot;your&quot; hardware.
      • IshKebab2 days ago
        The worst one is the UK&#x27;s NHS app, which is <i>only</i> available as an app, despite being just a webview wrapper! I have no idea what they were thinking.
        • cyberpunk2 days ago
          Sometimes it’s a compliance thing, e.g we can only show health data if your device passes some security controls first.
        • WesolyKubeczek2 days ago
          What happens when you visit whatever URL is being wrapped?
          • pasc18782 days ago
            You go to the nhs webpage and it works in the same way.<p>Login is better on the iOS app as you can use touch id&#x2F;faceId and not userid&#x2F;password also the webpage asks for cookies as it can&#x27;t seem to remember the choice
            • IshKebab2 days ago
              Really? What&#x27;s the URL that would allow me to see test results and book appointments?
              • pasc18781 day ago
                Unfortunately that seems to depend on who did the test or your GP.<p>There seem to be sites for your GP (which mine does via a .nhs.uk domain it used to be via <a href="https:&#x2F;&#x2F;account.patientaccess.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;account.patientaccess.com&#x2F;</a> which still shows appointments but does not allow booking but still allows requests for repeat prescriptions.) or hospital portal for results.
          • whstl2 days ago
            IME those apps often have the HTML&#x2F;JS embedded, so you would have to extract the contents, host them somewhere and proxy the API calls.
          • IshKebab2 days ago
            I dunno, I haven&#x27;t reverse engineered it to find the URL. But I would imagine it gets confused about authentication.
            • donalhunt2 days ago
              Would put money it on it using something like &#x27;?device_verified=1&#x27;.
      • elric2 days ago
        Not only that, but these companies are effectively letting Google decide who they can do business with. It&#x27;s insane.
    • ustad2 days ago
      Its funny to read negative replies to your comment on the shortcoming&#x27;s of web apps.<p>The browsers are controlled and manipulated by the likes of Apple and Google. These companies have a significant influence on the direction of browser features and limitations, often shaping them to suit their business interests. For example, Apple’s Safari and Google’s Chrome have been criticized for implementing features that reinforce their own ecosystems, such as limiting web push notifications or restricting certain web API functionalities to encourage users toward their native apps. This ultimately means that even in the browser world, the same forces that drive the app store monopolies can still control and restrict what’s possible, even if the web is inherently more open. So while web apps offer more flexibility than native apps in theory, the reality is that Apple and Google’s control over the browsers still limits the true potential of a completely open web.
      • jampekka2 days ago
        &gt; The browsers are controlled and manipulated by the likes of Apple and Google.<p>Who do you think controls Android and iOS native APIs?<p>Web standards at least have public forums and specs, with multiple parties involved. And all the major browser engines are open source and apps built for them are relatively cross-compatible.
    • HSO2 days ago
      <i>&gt; the &quot;App Store&quot; is a totally unnecessary concept introduced by Apple&#x2F;Google so they could scrape a huge percentage in sales.</i><p>Actually, when the iPhone was introduced, Apple <i>wanted</i> it to have only a few select native apps (like Maps or Mail) and all the rest to be web apps.<p>They were <i>browbeaten</i> into opening an app store by the developers, who wanted to do native apps, not the other way around like you say.
    • xenator2 days ago
      During earthquake in Bangkok in Friday Grab (local superior version of Uber) helped me to order taxi and get my kids home. Needless to say that cell phones network collapsed for most of the day. All people want to know what happens and is their family and friends are safe. They definitely have very optimized network layer for poor connections. I bet they can switch to udp or something. I&#x27;m glad that it wasn&#x27;t web app.<p>In many other cases I agree with you.
      • PaulRobinson2 days ago
        99% likely they&#x27;re using a REST API, which is... HTTP.<p>Even if it&#x27;s gRPC or something more exotic, it&#x27;ll be over TLS (you best hope it is).<p>You can have a webapp cached locally on your device. PWAs allow developers to create an SPA you can open from your homescreen, and to do that API interaction the same way as a native app.<p>I hope you and your family are well, and it&#x27;s great that tech helped. But please, don&#x27;t think that because this tech worked in this instance it can&#x27;t be made safer and securer.
      • YetAnotherNick2 days ago
        Switching to UDP won&#x27;t magically improve your network connectivity. The overhead of WebRTC over UDP isn&#x27;t too high as well.
    • hedora2 days ago
      It’s clearly for data collection. Take the yelp web app for example. It used to be much nicer than the native one. Then, they intentionally defeatured it until it was useless.<p>Also, this situation benefits the google-apple duopoly, since it means superior products (remember Windows Phone 8?) or privacy focused devices (FirefoxOS) have no chance of getting a foothold in the marketplace.<p>The objections I see in sibling comments are nonsense. Modern web supports high frame rates, developer control over the UI, etc, etc.
    • dagmx2 days ago
      While many native apps could be web apps, you’re ignoring a very large reasons for native apps:<p>1. Better UX and responsiveness for users, including better offline use.<p>2. Using native hardware APIs. How are you going to do things that require on device video compression, or realtime graphics that are more advanced than GL ES, etc<p>3. Battery life and performance. A native app can use less power than a web view for doing its work, and it can also make use of better async&#x2F;concurrency&#x2F;threading than a web view allows for.
    • elric2 days ago
      &gt; The only benefits I can see of &quot;Apps&quot;, are the developer get&#x27;s access to private information they really don&#x27;t need.<p>That&#x27;s exactly the point. More developer control, less user control. Can&#x27;t change cookie settings in an app, can&#x27;t (easily) block ads, can&#x27;t use developer tools to remove annoying UI elements, can&#x27;t disable phone home mechanics, can&#x27;t prevent the developer from profiling you.
    • ezequiel-garzon2 days ago
      In the case of termux, by far my favorite app, I have more than 2GB of locally installed packages. How would that work with a browser?
      • hk__22 days ago
        OP talks about apps in general, of course there will always be anecdotic cases like this one (see also <a href="https:&#x2F;&#x2F;xkcd.com&#x2F;1172&#x2F;" rel="nofollow">https:&#x2F;&#x2F;xkcd.com&#x2F;1172&#x2F;</a>).
    • baxtr2 days ago
      How would you make a video app in a browser? ie taking videos and then editing them afterwards
      • sph2 days ago
        GP used hyperbole but was not all wrong. The issue is that <i>most</i> native apps could very well have been web apps. I appreciate that on iOS adding a web app to homescreen is possible, albeit obscure and not many use that feature. I hate that Firefox never really supported PWA for some unfathomable reason.
        • baxtr2 days ago
          Exactly. But GP deliberately said all, not most or many.<p>GPs comment is something that people in politics would called sensational. Extreme rhetoric is great for upvotes because it stirs emotions but it’s not rational.
          • josfredo2 days ago
            I think it’s completely justifiable, since it illustrates the core of the idea. Also, HN users, unlike voters, can see through the framing. If anything, it’s a great way to spark a debate.
      • psychoslave2 days ago
        Do you mean something like <a href="https:&#x2F;&#x2F;commons.m.wikimedia.org&#x2F;wiki&#x2F;Commons:VideoCutTool" rel="nofollow">https:&#x2F;&#x2F;commons.m.wikimedia.org&#x2F;wiki&#x2F;Commons:VideoCutTool</a> ?
        • baxtr2 days ago
          I mean something like CapCut that has access to the phone camera for capturing video.
          • worksonmine2 days ago
            Browsers have camera and local file access if the user grants permissions, what do you mean isn&#x27;t possible with the browser?
            • psychoslave2 days ago
              I think that the name browser is basically just what is putting people in the wrong track of interpretation. They have been fully fledged VM sandboxes, which incidentally happen to also embed html and pdf interpreter natively.
      • scbzzzzz2 days ago
        The commenter says about most apps. The use case you mentioned requires computing resources. You can do the whole thing on browser too but it is not efficient way . But in the case of delivery apps, finance apps, you don&#x27;t need much compute as can work exclusively with APIs .
        • tossandthrow2 days ago
          Performance is likely not a reason anymore - and if it is, then it is the platform that imposes it (rust was runs fairly fast in a browser).
        • baxtr2 days ago
          No GPs says there are no apps, which is not most.
    • unethical_ban2 days ago
      There is nothing inherently evil about an app, or inherently good about a website - it&#x27;s only because historically we have allowed crappy app permissions structures and allowing apps to ask for things they don&#x27;t need.<p>Apps are faster, are more predictable (no auto-reloading or rendering issues) and generally perform better IMO.<p>On the other hand, in reality, you&#x27;re correct. I think the NYTimes app will collect more data from me than the NYTimes website.
    • halper2 days ago
      For me, there are a lot of applications that I want to be able to load regardless of whether I have a connection to the Internet or not: calendar, notes, mail etc. They can sync&#x2F;send&#x2F;whatever whenever I am next online.
      • turblety2 days ago
        Ah yeah. While this is mostly implemented terrible, a web app can absolutely do this for you using service workers. So you can install a webapp to your homescreen and use it without an internet connection at all.
        • wruza2 days ago
          Emulate a network layer to serve a pre-packaged bundle. Neat &quot;platform&quot;, but as a developer no thanks.<p>While apps are spying etc, making them is usually a no-brainer compared to churning and leaky web stacks. And probably not a single time a webapp loaded for me when I tried it outside standing in the wind trying to figure something out. It was always an app that started and helped and didn&#x27;t ever scroll horizontally while doing so.
        • ablob2 days ago
          In that case the only difference between a webapp and a normal app would be the permissions, wouldn&#x27;t it?
          • jspdown2 days ago
            Permissions and performances.<p>But we could argue that if webapps were more used on mobiles, new APIs would have been opened to facilitate cross-app integrations.
        • sgt2 days ago
          You seem to miss the fact that most web app experiences are inferior to that of native app.<p>The disadvantage of native is barrier to install. Once that&#x27;s done, the experience to the user is simply superior. True native experience, fast and predictable. As a developer it&#x27;s easier to build those types of apps as well.<p>People who haven&#x27;t used iOS might not understand this though as they&#x27;ve never seen &quot;how things should be&quot;.
          • umbra0717 hours ago
            you think most Android users are using PWAs instead of native apps? lol.
      • PaulRobinson2 days ago
        PWAs can do this.
    • nxjx2 days ago
      <a href="https:&#x2F;&#x2F;en.m.wikipedia.org&#x2F;wiki&#x2F;Platform_economy" rel="nofollow">https:&#x2F;&#x2F;en.m.wikipedia.org&#x2F;wiki&#x2F;Platform_economy</a><p>Becoming the middle man is the default model that supports scale. No one has come up with anything else to support a world where avg disposable income is close to 0
      • hgomersall2 days ago
        &gt; Becoming the middle man is the default model that supports rent extraction<p>FTFY
    • dustingetz2 days ago
      Zuck: Betting on HTML5 was a mistake (2012) <a href="https:&#x2F;&#x2F;www.infoq.com&#x2F;news&#x2F;2012&#x2F;09&#x2F;Facebook-HTML5-Native&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.infoq.com&#x2F;news&#x2F;2012&#x2F;09&#x2F;Facebook-HTML5-Native&#x2F;</a><p><a href="https:&#x2F;&#x2F;www.sencha.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.sencha.com&#x2F;</a>, the vendor of the ExtJS framework tried to argue that Facebook was wrong (2012): <a href="https:&#x2F;&#x2F;www.infoq.com&#x2F;news&#x2F;2012&#x2F;12&#x2F;Fastbook&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.infoq.com&#x2F;news&#x2F;2012&#x2F;12&#x2F;Fastbook&#x2F;</a><p>I worked for a company that used Sencha back in the day and wrote the first React integration over their form&#x2F;datagrid components in 2013. React ate their lunch
    • impossiblefork2 days ago
      It has the potential to be faster, more private and more efficient.<p>Absolute absence of lag, glitches, rendering issues, memory use in the kilobytes etc. is possible with native applications.
    • tim3332 days ago
      Pokemon Go. You couldn&#x27;t really do that as a webapp with the VR and stuff.<p>Also with the bank apps I think there&#x27;s extra security over a webapp - on the iphone they often scan my face.
    • graemep2 days ago
      Maps and navigation apps? Desktop integration and sync apps?<p>That said most of the time you are right.<p>I am fairly convinced that some apps are just wrappers around web apps. The Virgin Money (Uk bank brand) app used to ask for cookie permissions on launch and felt very like their website used to (until it was removed and they went app only).
    • autoexec23 hours ago
      &gt; The only benefits I can see of &quot;Apps&quot;, are the developer get&#x27;s access to private information they really don&#x27;t need.<p>this is the actual reason why companies push people to install and use their apps instead of their website.
    • Aachen2 days ago
      For one, you couldn&#x27;t access those webapps without a browser, so that&#x27;s the need for one app. It would also be a bit annoying if you had to load a webpage when trying to dial a number<p>Or am I not understanding what you mean when you use the quoted name &quot;Apps&quot;?
    • miniBill2 days ago
      Access to Bluetooth devices is a good reason to have an app. I definitely do not want a Bluetooth API in my browser (although Chrome does have something in that direction, I think it&#x27;s a bad idea)
    • dangus2 days ago
      So you never use native apps on your desktop? Why should a computing device not be able to run programs?<p>I feel like an actual security-driven design is a lot better than just relegating everything to the browser.
    • sbierwagen1 day ago
      Push notifications. Apps have them on by default, websites have them off by default. 100% of Temu&#x27;s valuation is because they pester users all the time with nudges to buy stuff, which works.<p>Normies don&#x27;t turn off notifications. Over the last few years all my relatives have picked up smart watches, (thanks to cell carriers upselling them hard during phone replacements) and in any given conversation at family events they&#x27;ll be glancing at their wrist every 100 seconds.
      • retrac1 day ago
        Registering for push notifications ought to be a protocol much simpler and lightweight, compared to this spinning up a virtual machine and running a downloaded binary for each channel of notification you wish to receive.
    • renegat0x02 days ago
      Many things needs to be an app, but so so many do not require.<p>Many apps are apps just because they can collect your data, and create walled gardens. It is harder to create extensions for existing apps, for web pages it is easier.
    • xlii2 days ago
      Any kind of offline cryptography. Imagine Apple Pay being an app. So all sort of digital signatures, documents, checks, payment codes and vouchers, tickets etc.<p>IMO this is in the range of „why we use machines to transport if we all have legs”. Technically true, but applications do more than only UI.<p>I&#x27;ve heard this argument for the past 30 years (we won’t be using apps, everything will be remote console&#x2F;terminal&#x2F;webpage&#x2F;web). Chromebooks were meant for web-first access, and yet native apps are still alive and kicking.
    • chamomeal2 days ago
      To me a mobile app is usually just a shorter web app that you can’t zoom on<p>Edit: and I’ll venture a guess that since mobile apps can’t use things like ad blockers, companies probably prefer them. More control over what you look at.
    • dbtc2 days ago
      I agree, mostly, but there are definitely some programs I want running on my phone and outside of the default browser.<p>- Timer &#x2F; alarm clock - Camera - File browser - Offline maps - Another web browser<p>But not 250MB banking app.
    • usrusr2 days ago
      Push notification is the big one. Yes, there is web push, but that&#x27;s hardly scratching the surface of feature completeness. And incentives to change that aren&#x27;t really there.
    • miki1232112 days ago
      Yeah, good luck writing a screen reader, a demanding mobile game, a (local) music player, or a warehouse parts lookup app, supporting fully offline use and barcode reading functionality.<p>In 2025? Sure, you can do some (but not all) of that in a browser? In 2010, when those systems were becoming popular? Absolutely not a chance.<p>People forget that Apple initially tried this exact approach. On the first iPhone, that&#x27;s how you were supposed to do apps. People wanted native so much that they were willing to go the extra mile, jailbreak their device, document the undocumented iPhone SDK and write their own toolchain. The user demand for native was clearly so overwhelming that Apple finally relented and gave in.<p>Even a few years later, Facebook tried hard to have a single, cross-platform HTML5 website instead of bothering with apps. Even then, browsers just weren&#x27;t there yet, and they probably had the best engineers and resources on that project one could have had for any money.
    • ErigmolCt2 days ago
      So many apps are glorified wrappers around web content anyway, and in those cases, native just adds bloat (and tracking)
    • LtWorf2 days ago
      Speed, and from that follows battery life.
    • immibis2 days ago
      In other words, you believe all computers should be Chromebooks, which can only run Chrome and nothing else?
    • zer0zzz2 days ago
      The most basic app, a notepad, I often prefer native. When I go between google keep or notion to apple notes I can tell the difference. If the text is long enough, the web apps just can not load the content.<p>Just to confirm:<p>I dumped all of my notes from my insanely large apple notes (about 16000 lines of text) and pasted them into Google Keep, Notion, Google Docs. With the exception of Google Docs the rest of them flat out froze and I had to kill my browser. Stop trying to tell us that the browser is the answer to everything when most web apps cant do the job of Notepad.exe or vi
      • esperent2 days ago
        &gt; With the exception of Google Docs<p>So, one out of three webapps that you tested could handle this much text. It suggests that the problem for the other two is their implementation, rather than any limitation of the browser.<p>Of the two that failed, did you also try the app versions to see if they failed too? I really doubt the Notion app could handle 16000 lines of text.
      • turblety2 days ago
        Sorry, I couldn&#x27;t recreate this. I just built a tiny texteditor app: <a href="https:&#x2F;&#x2F;65cd02a1-8f00-47cb-b1d1-231493de5fc2.paged.net&#x2F;" rel="nofollow">https:&#x2F;&#x2F;65cd02a1-8f00-47cb-b1d1-231493de5fc2.paged.net&#x2F;</a><p>Tried putting 20k lines into it. Loaded instantly, allowed me to scroll and edit flawlessly.<p>But I get your point. I&#x27;m on a pretty decent 2022 iPhone, and I&#x27;m sure at some stage I would run into a performance hit. But not at 20k lines.
        • eknkc2 days ago
          Note taking apps generally do formatting, markdown like stuff or at least linking to urls in the text etc.<p>You cant slap a plain text field and assume that emulates the actual experience in any way.
      • YetAnotherNick2 days ago
        Now try VSCode in chrome and compare it with apple notes. I use both and VSCode wins hands down in long lines and files.
    • roncesvalles2 days ago
      It&#x27;s an advertisement that you see each time you use your phone.
    • djaychela2 days ago
      Working offline?
    • gtsop1 day ago
      Very narrow take, it so far fetched i would consider this a bad faith comment.<p>How could you possibly consider intensive games to be &quot;simply&quot; web apps? How about network apps like vpns, wifi analyzers? Have you really not come across such apps or are we meant to think every app is a TODO application?<p>Both web and native has been driven by the same corporate forces, the argument here should be technical only - what can you do on native that you can&#x27;t on the web. Mixing this technical matter with corporate policies muddies the waters.
    • prinny_2 days ago
      Honestly I wonder the same. App stores have big % cuts for the provider, I believe Apple has a 30% cut? Surely this number is big enough to justify spending the resources for a mobile first site?
    • nottorp2 days ago
      Imagine a world in which your smartphone&#x27;s battery lasted more than a day...<p>... and ram requirements for good performance went down by 66% ...
    • NooneAtAll32 days ago
      ...not every app is a worse reddit website?<p>there are games, there are offline programs<p>---<p>website-as-an-app do needs to be squashed, that&#x27;s something I do agree with you
  • aucisson_masque2 days ago
    That&#x27;s why I like hacker news.<p>I found this article yesterday and posted it on reddit android, here : <a href="https:&#x2F;&#x2F;old.reddit.com&#x2F;r&#x2F;Android&#x2F;comments&#x2F;1jmwg4w&#x2F;everyone_knows_all_the_apps_on_your_phone&#x2F;" rel="nofollow">https:&#x2F;&#x2F;old.reddit.com&#x2F;r&#x2F;Android&#x2F;comments&#x2F;1jmwg4w&#x2F;everyone_k...</a><p>0 upvote, comment filled with what is either depressed sad people or just bots.<p>Here it&#x27;s top 2... With mostly interesting comment.<p>Some subreddit are more dead than other but r&#x2F;android got to be one of the worst.
    • diggan1 day ago
      &gt; Some subreddit are more dead than other but r&#x2F;android got to be one of the worst.<p>Yeah, I&#x27;m not sure what exactly is going on with reddit but if dead-internet theory would hold anywhere, it seems to be there.<p>Besides, all the topic&#x2F;subject subreddits seems moderated by people who hold a vested interest in the topic&#x2F;subject, to the detriment of their community. I made a submission which went into details about the proprietary license that Meta&#x27;s Llama is under, and what exactly that license means, and it was removed manually by the moderators of r&#x2F;LocalLlama without any reasoning + they refuse to answer why it was removed even after trying to understand the rules of the subreddit better.<p>I&#x27;m guessing when the last &quot;reddit purge&quot; happened where they replaced a bunch of community moderators with employees from reddit, most of the platform was sold to companies to moderate their own spaces, unfortunately.
      • Mistletoe1 day ago
        Moderation is one of the huge Achilles’ heels of Reddit. I’m confused why Reddit thinks a monarchy with no term limits will work on a website when it has never worked in human history. There is no voting whatsoever where users can give feedback on how they think the moderation or the subreddit is going. You get entrenched subreddits like &#x2F;r&#x2F;movies and their obsession with movie posters instead of movie discussion or &#x2F;r&#x2F;running, which is incredibly unused because the mods insist on removing almost any discussion of running outside the weekly threads except for idiotic race reports in obscure places that no one reads or cares about.
        • xmprt1 day ago
          The nice thing about reddit is that no one is forcing you to follow such broach subreddits which appeal to the common denominator. In my experience, any subreddit which has more than a few millions members is going to be pretty terrible.<p>Find a more niche subreddit like &#x2F;r&#x2F;&lt;city_name&gt;running (although location subreddits fall into a similar trap) or &#x2F;r&#x2F;longdistancerunning and you&#x27;d probably find them to be more interesting simply because moderators are beholden to a smaller community and their job is more about making things interesting for their niche and cultivating a community rather than just dealing with slurs, bots, and spam.
          • diggan5 hours ago
            &gt; Find a more niche subreddit like &#x2F;r&#x2F;&lt;city_name&gt;running<p>Maybe that works in the US, since half of all reddit users seem to be from there, and for very general topics like running.<p>But for discussing local LLMs, you have just about one place to chose between, and if the moderators somehow are silencing discussions there, there doesn&#x27;t seem to be much you can do about it.
          • I agree with your comments about the large subreddits, but I also agree with Mistletoe that even many niche subreddits (or at least &quot;midsized&quot; subreddits) suffer from the same moderation problem.<p>Namely, once a subreddit becomes popular or has basically &quot;the default&quot; subreddit name, it&#x27;s <i>extremely</i> difficult to just start a new subreddit if you don&#x27;t like the moderation on the old subreddit, because it&#x27;s so hard to get people to know about or move to the new subreddit. There was some drama years ago where some r&#x2F;lgbt mods went on a major power trip, which caused other folks to start the r&#x2F;ainbow sub, but still most folks go to the lgbt reddit as it&#x27;s what comes up first if you just search for &quot;gay subreddit&quot; or similar.<p>You say &quot;because moderators are beholden to a smaller community&quot;, but that&#x27;s the point - mods aren&#x27;t really beholden to anyone at all, as it&#x27;s not like electing mods is a democratic process. Note nor do I think it should be, as being a mod is a ton of grief and labor that people donate for free. But I do think Reddit could make it a lot easier and &quot;fairer&quot; if people wanted to &quot;fork&quot; a subreddit if people wanted to discuss the same topics with the same community, just with different moderation rules.
            • MichaelZuo1 day ago
              If someone&#x2F;some group can’t successfully create a smaller competing subreddit, what prospects would they have to successfully convince over half the existing userbase of a subreddit to formally vote for a “fork”?
              • umbra0717 hours ago
                the issue is that it&#x27;s very hard to even let their desired audience know that they <i>exist</i>.<p>the only feasible way (short of like, scraping every comment made on a subreddit and dm&#x27;ing each of those users) to reach the audience you&#x27;re trying to convince to switch to your alternate subreddit is by... posting on the original subreddit. the original subreddit has no incentive to allow your post, and public moderation logs aren&#x27;t a thing on reddit, so...
                • MichaelZuo13 hours ago
                  So…? It still makes no sense to expect there to be any prospects of accomplishing something vastly harder, regardless.
        • Seattle35031 day ago
          As someone who has moderated multiple subreddits, and single handedly brought a subreddit from 0 to 100,00 subscribers, this misunderstands subreddits, moderation, and the relationship between Reddit and moderators. IMO subreddits were supposed to be like random forums on the internet of old, but with a shared substrate. Those forums were singularly owned as well and if you didn&#x27;t like the operators you moved on, because there was no one you could escalate to.<p>There is fundementally a social contract between Reddit and its moderators. Moderators get autonomy and control, and reddit gets content that keeps users around. As long as Reddit does not pay moderators, autonomy and control is all they can give moderators. I&#x27;m investing a lot of effort, and I&#x27;d like to retain some control. IMO creating a community is more like starting an open source project on Github with a lot of community contributions.<p>If you take away autonomy and control from moderators, what is in it for the moderator? Imagine if github started seizing projects wholesale, taking them over and installing new maintainers. People would move off the platform.<p>Some people say that moderators are unpaid employees, but IMO that is only to the degree that moderators are required to carry out Reddit&#x27;s agenda and priorities. We don&#x27;t call OS maintainers github employees. I don&#x27;t mind if Reddit benefits from my communities, as long as I can run it the way I want. If you take away autonomy and control, moderators absolutely <i>become</i> unpaid employees.<p>If Reddit didn&#x27;t like my policies and took my subreddits, I would take that as a strong signal that Reddit is not the place to build my communities. The API debacle, protests, and mod removals caused me to decentralize my community more. I spam a linktree in my subreddit that links to Discord and other resources, exactly to protect against community seizeure by Reddit.<p>I think you touch on some real issues. One is of namespacing; folks can sit on valuable portions of the namespace and basically extract rent. We have the same issues for domains, and haven&#x27;t solved it there. Some places like github semi-solve it by putting repo&#x27;s in organizations, but that shifts the namespace issue to the organizational level.<p>The other problem is second generation moderators. Most moderators are terrible at succession planning, and so generally chose terrible successors. Many second generation moderators don&#x27;t understand the original decisions that shaped the community, and what makes the original community successfully. Reddit should do more to encourage succession planning, and teach moderators how to do it.
        • SV_BubbleTime1 day ago
          You are confused.<p>You seem to think Reddit Inc wants anything but control over the users. They are not at all interested in discussion or being a social network. If they could achieve their real goal without all the annoying comments, they would shut those off instantly.<p>Reddit is a narrative pushing machine first and foremost. The money they make on advertising - IS NOT - from the one of two ads you see per page.<p>The Reddit stock price is not at all reflective of their tech. It’s based on ability to push thoughts to users.
          • dghlsakjg1 day ago
            Their annual report, and their advertiser platform doesn’t really back up whatever it is you are implying here.<p>I would be incredibly surprised to find that reddits officers are willing to risk life ruining fines to lie in their filings about this.
    • wruza1 day ago
      Thread success is hit and miss. You can post and there&#x27;s crickets, or you can post and people pile in. If you click the &quot;past&quot; link under the title, there&#x27;s a thread from 2 days ago, completely dead.
    • lisnake1 day ago
      On the other hand, many interesting links (IMO) I submit to HN also get zero comments
      • kleiba1 day ago
        Worse, I&#x27;ve had submissions (both links and comments) get flagged in the past, and I have no idea why. I suppose they must have validated some HN policy, but if I had more information about the rationale, I could avoid making the same mistake again in the future (all of my submissions where that happened were for genuinely interesting contents or 100% non-offensive opinion comments).
    • umbra0717 hours ago
      r&#x2F;android got hit really hard by the subreddit blackouts. activity is just very low there.
    • hnuser1234562 days ago
      The subreddit is mostly younger folks more aligned with the &quot;fanboy&quot; attitude, they downvoted because it was a critique of Android.<p>Hacker news understands the concept of constructive criticism.
      • aio22 days ago
        I wouldn&#x27;t say understand, but <i>better</i> understands
        • touristtam1 day ago
          It also helps that you need to have a certain _rank_ to be able to downvote on here, as opposed to the default rights you get on reddit.
        • SV_BubbleTime1 day ago
          Exactly this can be seen here if the discussion is about climate.<p>Even better understands might be pushing it. “Better tolerates”
  • nindalf2 days ago
    &gt; Beyond the usual categories, I see there are checks for apps like Tamil Calendar, Odia Calendar, Qibla Direction Finder, mandir apps, astrology apps. They know what they’re doing.<p>This loan app is profiling people on the basis of race (Tamil, Odia) and religion (Qibla Direction Finder is used by Muslims, mandir apps by Hindus).
  • graemep2 days ago
    The HSBC UK Android app look s at what apps you have, and refuses to run if you have apps with certain permissions (such as an alternative launcher) and now refuses to run if you have any apps from outside the Google app store.<p>I have complained about this here before, but the end result was that I asked for a hardware security device and use the website instead.
    • qbane2 days ago
      Tired of apps using shady, fragile tricks to refuse to work and claiming that you are &quot;secured&quot; by them
    • odiroot2 days ago
      Interestingly FirstDirect app (also part of HSBC) has no such problems. It even ran on my previously rooted phone.
    • fudged711 day ago
      That&#x27;s pretty funny, right? They have to spy on you to tell you what else you are using could be spying on you. Do they happen to say this data is not transmitted to the company?
    • switch0072 days ago
      That&#x27;s beyond absurd. Sounds par for the course with HSBC!
  • DevKoala2 days ago
    &gt; How is knowing whether I have the Xbox or the Playstation app installed on my phone essential to their Swiggy&#x27;s core functionality? How will knowing if I have the Naukri or Upstox app help them deliver groceries to my doorstep?<p>It is for fingerprinting purposes
    • nom2 days ago
      It also checks for popular remote desktop apps (allow incoming connections to the phone) which could be used to increase scam success rate.<p>Same with banks apps, if you are a scammer it&#x27;s really useful to know beforehand what kind of bank the target uses.<p>There are probably a whole bunch of groups who have a purposes for this kind of info, especially if they can link it to the phone number.
    • wutwutwat2 days ago
      fingerprinting is the best case scenario
      • _heimdall2 days ago
        What&#x27;s the worst case, in your opinion?
        • em3rgent0rdr2 days ago
          The US Customs &amp; Border Control apps (&quot;CBP Home&quot; and &quot;Mobile Passport Control&quot;) could check for blacklisted apps and flag you to be deported to an El Salvadorean gulag without due process.
          • _heimdall2 days ago
            Does El Salvador do gulags? I thought that was more of a Russian approach to imprisonment.
            • skrebbel2 days ago
              Parent commenter doesn&#x27;t mean literal gulags, but a similarly bad place sent people to by a similarly bad government.
              • touristtam1 day ago
                I think the commenter was asking for a clarification on the hyperbole used. Unsure on the intend being candidly asked or there was an agenda (as it is often the case with political discussions).<p>Hopefully the El Salvador deal is a far cry from the internment camps from the 19th &amp; 20th century.
            • __jonas2 days ago
              This is likely in reference to a recent deal the US (Trump) has made with El Salvador, allowing them to ship US citizens off to prisons in El Salvador, whether this is actually possible is not clear at this point though [1].<p>Here is some more information about the conditions in these prisons in El Salvador, CECOT being the most notable one:<p>&gt; Able to hold 40,000 inmates, the CECOT is made up of eight sprawling pavilions. Its cells hold 65 to 70 prisoners each. They do not receive visits. There are no programs preparing them to return to society after their sentences, no workshops or educational programs. They are never allowed outside. [2]<p>I believe the term gulag makes sense in that context despite it not being a forced labor camp. Not sure how this relates to Russia at all (apart from the origin of the term obviously).<p>[1] <a href="https:&#x2F;&#x2F;apnews.com&#x2F;article&#x2F;rubio-trump-deportations-usaid-f7a62a10b9a5d81582d05a33ff2281a4" rel="nofollow">https:&#x2F;&#x2F;apnews.com&#x2F;article&#x2F;rubio-trump-deportations-usaid-f7...</a><p>[2] <a href="https:&#x2F;&#x2F;apnews.com&#x2F;article&#x2F;el-salvador-us-rubio-prison-de912f6a8199aaa7c8490585dcaa3b87" rel="nofollow">https:&#x2F;&#x2F;apnews.com&#x2F;article&#x2F;el-salvador-us-rubio-prison-de912...</a>
              • pavel_lishin2 days ago
                &gt; <i>despite it not being a forced labor camp.</i><p>Well, not yet, anyway.
        • hattmall2 days ago
          Targeting and profiling. Reselling the data.
          • _heimdall2 days ago
            Maybe I&#x27;m wrong, but that feels pretty similar to fingerprinting. Usually that&#x27;s why online services try to fingerprint you, for advertising and data revenue.
          • DevKoala2 days ago
            That is what the fingerprinting is for.
            • YetAnotherNick2 days ago
              Fingerprinting is just for identifying user, not getting user data. You can potentially resell things like app usage to credit rating company.
              • DevKoala2 days ago
                That is profiling.<p>Fingerprinting is an identification mechanism. It is most commonly used for targeting and profiling.
  • zx80802 days ago
    &gt; For extremely specific use cases such as file managers, browsers or antivirus apps, Google grants an exception by allowing QUERY_ALL_PACKAGES permission, which provides full visibility into installed apps.<p>Why would browser need to enumerate the installed apps?<p>Why?!
    • Borealid2 days ago
      When a user visits a play.google.com URL Google wants to be able to show either an &quot;install&quot; or a &quot;launch&quot; button contingent on whether the app is already installed.<p>In other words, blame Google product management.
      • Jach2 days ago
        I don&#x27;t buy this. Google has this information on their backend, they don&#x27;t need to query any local state. Indeed, when I visit a play.google.com URL, google checks if my browser is logged in or not. If it is not, the default is &quot;Install&quot; no matter what. If I do have a session, then it&#x27;s either &quot;Install&quot; if I don&#x27;t have it installed, or &quot;Install on more devices&quot; if I do have it installed.
        • NoahZuniga2 days ago
          This is true, but if they didn&#x27;t allow this permission for other browser apps that would be anti-competitive.
      • lurking_swe2 days ago
        this doesn’t make sense and sounds like an excuse IMO.<p>Instead of the browser enumerating all apps, why can’t it check when you visit a page if the current page (ONLY the current page) is installed as an app?
        • jerbear43282 days ago
          How would the OS know if the app that the browser is querying about is actually the current page? For all the OS knows, the user might be quickly visiting a ton of play.google.com pages for the top 1000 apps on the app store.
          • lurking_swe2 days ago
            &gt; How would the OS know if the app that the browser is querying about is actually the current page?<p>Maybe i’m missing something, but it sounds like it would be easy for google to support this functionality by letting developers configure this in their app “bundle”. A property that tells the OS “my app is related to domain example.com”. Make it an array of domains if you must.
            • codethief2 days ago
              &gt; A property that tells the OS “my app is related to domain example.com”. Make it an array of domains if you must.<p>Elaborating on the sibling&#x27;s comment: There is already such a property that apps must set in their manifests in order for them to be able to react to links&#x2F;intents for domain-associated-with-the-app.com.<p>But it doesn&#x27;t address the question of how a browser is supposed to be able to open links to domain-associated-with-the-app.com in that app, without Android revealing to the browser whether the app is installed or not. In short: The browser will, by construction, be able to determine which apps you&#x27;ve got installed or not.
              • pizza2 days ago
                I mean, do Windows or macOS tell the browser which mail apps you have installed when it handles a mail:&#x2F;&#x2F; URI?
                • josephg2 days ago
                  No, but web browsers do have the ability to ask the OS which application is associated with a certain url type.<p>But it doesn’t leak that information to web pages.
            • charcircuit2 days ago
              Intent filters can be for domains. It&#x27;s how deeplinks work. But with querying being locked down you can&#x27;t know what apps can handle a deeplink.
          • heavenlyblue2 days ago
            make it into a system dialog?
            • LordShredda2 days ago
              But God forbid users learn how to use their device. All of this could be prevented by having the users manually pick the application instead.
      • catigula2 days ago
        A minor UX difference doesn&#x27;t really feel like a great case for reducing user privacy, it makes me a little concerned about priorities... which I already was, really.
      • kelvinjps102 days ago
        These kind of links open the play store app directly and the informstion it&#x27;s displayed there
    • billfruit2 days ago
      Indeed some of these apps really ask for such expansive set of permissions than they need.<p>Obsidian for example asks for permission for entire filesystem, while it really needs to access the files which the user needs it to see.
    • nulld3v2 days ago
      File managers need full access as you can use that ability to extract and inspect the code of any apps installed on the system. It is a very useful feature and I would hate for it to be removed.
    • Kwpolska2 days ago
      Perhaps it&#x27;s checking which apps can handle links?
      • mightysashiman2 days ago
        That is managed by the system. Settings &gt; Apps &gt; Default apps &gt; Opening links
    • MrStonedOne2 days ago
      [dead]
  • andsoitis2 days ago
    &gt; everyone knows all the alls on your phone<p>On Android phones. iPhone doesn’t have this privacy deficiency.
    • knlam2 days ago
      Actually you can via private API, which Apple app use all the time but forbid other app to use<p><a href="https:&#x2F;&#x2F;blog.verichains.io&#x2F;p&#x2F;technical-analysis-improper-use-of" rel="nofollow">https:&#x2F;&#x2F;blog.verichains.io&#x2F;p&#x2F;technical-analysis-improper-use...</a>
    • wkat42422 days ago
      On iOS it&#x27;s kinda worse in some ways. If you enroll into a company MDM they can see all your apps.<p>On Android if they use the work profile (which is the standard method these days) they can only see the apps inside there.
      • mgriepentrog2 days ago
        Apple introduced account-driven enrollments in 2021[1], which behaves similar to Android&#x27;s work profile. Managed apps&#x2F;data are kept in its own APFS volume, and MDM servers don&#x27;t have access to anything outside of it. They also disallow system-wide commands like wipe device. The only caveat is you need managed Apple IDs[2] to use this enrollment flow, and I doubt many companies have set it up.<p>Regardless, MDM installed app visibility is limited to those users who opt-in to an organization managing their personal device, and isn&#x27;t an effective way to broadly gather what apps a given person has installed. What&#x27;s described in this post would work on any user&#x2F;device, and there&#x27;s no way to deny&#x2F;opt-out of specific permissions.<p>[1] <a href="https:&#x2F;&#x2F;developer.apple.com&#x2F;videos&#x2F;play&#x2F;wwdc2021&#x2F;10136&#x2F;" rel="nofollow">https:&#x2F;&#x2F;developer.apple.com&#x2F;videos&#x2F;play&#x2F;wwdc2021&#x2F;10136&#x2F;</a> [2] <a href="https:&#x2F;&#x2F;support.apple.com&#x2F;guide&#x2F;apple-business-manager&#x2F;use-managed-apple-accounts-axm78b477c81&#x2F;web" rel="nofollow">https:&#x2F;&#x2F;support.apple.com&#x2F;guide&#x2F;apple-business-manager&#x2F;use-m...</a>
        • wkat42422 days ago
          Yes I know about User Enrolment. The problem is the managed Apple IDs are a complete and total dealbreaker. So I&#x27;m not even considering this as an option.<p>The reason is that Apple demands that the UPN (the account ID) and the email address are the same. For us this is not the case (our UPN is our employee number as an email address, whereas our email address is just our name). And obviously we&#x27;re not going to change this for ten thousand users because Apple wants to (most of which don&#x27;t have Apple devices because we&#x27;re a European company). Also, you have to manually decide what happens to each user that has already created an account with their corporate email address and what to do with the content they purchased on it. This is not feasible for a large corp. We have commented this to our Apple account manager for years and years but they simply don&#x27;t care. If you work in this realm you probably know that Apple doesn&#x27;t really care about things that matter for their corporate customers anyway. The consumer is their main client and it shows (unlike with Microsoft where it&#x27;s the opposite).<p>So the whole account-driven enrolment (User Enrolment) as well as everything else depending on managed Apple IDs like DEP for Macs is completely out of the window.<p>The problem in my opinion is that I as an admin can simply query for example all the employees that have something like Grindr installed. Considering the current political climate in the US (or worse, the middle east where this can lead to a death sentence in some cases) it&#x27;s obvious why this is super bad. And really, why should we be able to do this at all?
        • whs2 days ago
          I&#x27;m working on implementing this for the company, and the annoying limitations on iOS is that you can&#x27;t clone apps. If you want Gmail (as an example) as managed app, you can&#x27;t have another Gmail as unmanaged app. While the company can&#x27;t see inside the Gmail managed app (without the app itself explicitly providing that feature), the company can remove Gmail (and any local data inside the app) at any time.<p>Fun fact from the MDM implementation - the most private way (at least to the company policies) to have a company-connected device is to buy a separate phone and install company&#x27;s MDM on it. On company provided devices, the company may locate company&#x27;s assets at any time but doing so on a personal device is a privacy breach.
          • wkat42422 days ago
            Yes, Apple hates the idea of work-badged apps that Android has. I have to admit, a lot of our users don&#x27;t grok it either at first. However once they realise the benefits (the company has much less visibility, AND they can turn off the work section completely with the touch of a button) they usually come around pretty quickly.<p>The bad part of this is that apps have to specifically support the multiple profiles option, otherwise they can&#x27;t be used for this.<p>And yes, I agree, that is the best way. We have the same restrictions for personal devices. Though I as an admin know we never use the locate functionality (and I know every person who has access to it).
            • illiac7861 day ago
              Donyou know if account driven enrolment requires different phone numbers for the MDM managed apps and the personal ones? Specifically for the diaper app for example.
              • wkat424218 hours ago
                I don&#x27;t believe they do, no. The numbers aren&#x27;t all that important in terms of MDM. We don&#x27;t even see the number if someone inserts a second private SIM in their company phone. We consider that personal information we shouldn&#x27;t even know.
      • fashion-at-cost2 days ago
        I would have to strongly recommend nobody enroll a personal device in a company MDM. If the company needs you to have mobile connectivity that badly, they can give you a device.
        • illiac7861 day ago
          I think it’s a personal decision. I really, really do not want to carry two huge slabs around. One is already too much.<p>Account driven MDM enrolment pushes the Pareto front when it comes to privacy&#x2F;conveniency compromises from my point of view. I will ask my IT if they have already looked at it.
          • fashion-at-cost16 hours ago
            The benefit with the two device approach is when you can <i>not</i> carry both devices for the majority of the time. If i’m not explicitly on call, my work device isn’t with me. Anything anyone says to me <i>will</i> wait until I’m back in the office.<p>If you have the self control to refuse to ever check Slack and disable all notifications&#x2F;etc on your personal phone when not on call, this doesn’t apply as much. But for me I default to trying to stay on things and forcing myself to disconnect is a net good, even if it does mean I carry two phones at times. My pockets are large.
      • jmb992 days ago
        I mean... isn’t that expected of an MDM? I have always assumed that any company device (i.e. any device enrolled in an MDM) is under 100% control and surveillance of that company. Being able to see my installed apps is the least of my worries.
        • wkat42422 days ago
          No I (as a mobile admin) don&#x27;t think it should be like that at all, at least not for BYOD devices.<p>Android has this really well worked out with their work profile. It&#x27;s like having a company VM on your phone. Really great separation.<p>But on Apple we can&#x27;t use a similar option which I admit does exist, but there&#x27;s too many strings attached (see the discussion above).
      • asah2 days ago
        get a separate device for work ?
        • pjerem2 days ago
          <i>ask</i> a separate device for work.
          • wkat42422 days ago
            True, if you use it for work they should provide you one.<p>The problem is of course carrying two devices with you.
    • WuxiFingerHold2 days ago
      iPhones are <i>less</i> of a privacy nightmare.<p>One of the biggest incentives for creating apps is to scrape all kind of data from the users. Look at how many apps require permission to see you contacts. And how many actually need your contacts to function. That&#x27;s why I&#x27;m still a bit surprised that many seem to be surprised by findings like this one here.
      • josephg2 days ago
        I wish there was an option for “give bogus contacts” which showed the app a list of contacts - but it was all randomly generated junk. Make it so the app can’t tell if the contacts it gets are real or fake.<p>I read a fiction book years ago where there were cameras everywhere. To get privacy, instead of hiding their identities the protagonist paid companies to insert bogus information into the information brokers’ network. So if they tried to figure out where they were on a certain day, 20 records would match. I think this is a much more likely vision of the future.
        • 3np2 days ago
          I guess rather than closing my Google account I should have removed the 2FA and changed the password to a weak one on the HIBP list (:
      • wruza2 days ago
        <i>Look at how many apps require permission to see you contacts. And how many actually need your contacts to function.</i><p>That is, again, not <i>require</i> but <i>ask for</i> on iphone. I have zero non-functioning apps on my iphone due to denied access to contacts. Even a chinese bluetooth light controller doesn&#x27;t dare (while refusing to work on android for the same reason).<p>You can hate apple&#x2F;iphone ecosystem all you want, but let&#x27;s not sneak false claims into how they actually work.
        • hk__22 days ago
          &gt; I have zero non-functioning apps on my iphone due to denied access to contacts.<p>You don’t have WhatsApp then.
          • nechuchelo2 days ago
            I do and deny it access to contacts. Everything works fine.
          • jen202 days ago
            iOS grants just the contacts you select - including “none” to apps. WhatsApp works fine in that regime.
      • hk__22 days ago
        &gt; Look at how many apps require permission to see you contacts.<p>It is so annoying that it’s either &quot;give access to ALL my contacts and ALL their information (yes, even the notes I took on their favorite things for next Christmas)&quot; or &quot;don’t give access&quot;. I wish we could limit the number of contacts and the level of information we give.
        • CharlesW2 days ago
          &gt; <i>It is so annoying that it’s either &quot;give access to ALL my contacts and ALL their information… […] I wish we could limit the number of contacts and the level of information we give.</i><p>iOS added fine-grained (at the contact level) access to contacts data last year.<p><a href="https:&#x2F;&#x2F;lifehacker.com&#x2F;tech&#x2F;you-can-control-which-contacts-apps-can-access-in-ios-18" rel="nofollow">https:&#x2F;&#x2F;lifehacker.com&#x2F;tech&#x2F;you-can-control-which-contacts-a...</a>
          • MBCook1 day ago
            They did the same for photos years ago.<p>Many apps have not updated and perhaps never will.
            • CharlesW1 day ago
              They don&#x27;t need to be, since it&#x27;s enforced at the OS level. Users can limit permissions to individual contacts regardless of whether iOS apps have been updated to explicitly handle that use case.
              • MBCook18 hours ago
                I meant updated yo the newer nicer replacement UIs.<p>For example I know Slack still doesn’t use the single picture picker. They still want access to everything.<p>So iOS lets me limit what they can see, but it’s still a pain compared to just letting me pick the one picture I want.
        • subscribed2 days ago
          Check if GrapheneOS suits your needs. It has &quot;contact scopes&quot;, ie you cna literally allow the app to see single contact only.<p>Same with storage scopes: one directory and that&#x27;s it.
        • mercutio21 day ago
          iOS hasn’t allowed access to contact notes for several years, and last year added support for providing arbitrary subsets of contacts to all apps.
        • normie30002 days ago
          Photo access has improved a lot in this regard recently.
    • scarface_742 days ago
      This was somewhat mitigated on iOS a few years ago.<p>You could try to communicate with an app via the custom URI scheme and if it succeeded, it would know you have the app installed. Twitter used this for finger printing.<p>An app has to get a special intent and has to list the apps it wants to use it for.
    • neither_color2 days ago
      Speaking of iPhone, Im curious about something. On occasion, I log into the [former] bird app using the web app because it&#x27;s enough to check up on some key follows.<p>Recently, they released a major update to their LLM feature and I installed the app to check it out. While I had the app installed, every time I checked the mobile website there was a large banner directing me to go to the app. Ad blockers and distraction blockers would not get rid of it. When I deleted the app again, it was gone. What gives? Why does the mobile website know whether I have the app installed? How come content+distraction blockers are enough to block all reminders to use the app when it&#x27;s not installed, but are irrevocable if I have the app installed?
      • js22 days ago
        Apple calls these Smart App Banners. Webkit cooperates with iOS to present them according to a meta tag in the page:<p><a href="https:&#x2F;&#x2F;developer.apple.com&#x2F;documentation&#x2F;webkit&#x2F;promoting-apps-with-smart-app-banners" rel="nofollow">https:&#x2F;&#x2F;developer.apple.com&#x2F;documentation&#x2F;webkit&#x2F;promoting-a...</a><p>You can get rid of them with the Unsmartifier extension.<p><a href="https:&#x2F;&#x2F;old.reddit.com&#x2F;r&#x2F;apple&#x2F;comments&#x2F;q55753&#x2F;unsmartifier_safari_webextension_to_remove_smart&#x2F;" rel="nofollow">https:&#x2F;&#x2F;old.reddit.com&#x2F;r&#x2F;apple&#x2F;comments&#x2F;q55753&#x2F;unsmartifier_...</a><p>The StopTheMadness extension can also remove them (among many other things... this extension is a must have for me):<p><a href="https:&#x2F;&#x2F;underpassapp.com&#x2F;StopTheMadness&#x2F;support-ios.html" rel="nofollow">https:&#x2F;&#x2F;underpassapp.com&#x2F;StopTheMadness&#x2F;support-ios.html</a>
        • hnburnsy2 days ago
          &gt;Apple calls these Smart App Banners. Webkit cooperates with iOS to present them according to a meta tag in the page<p>JFC. Are they disabled if you ask for the desktop site?
          • uni_baconcat2 days ago
            I think it won’t. I tried open X.com desktop version on iPad, Safari still showed “open with X app”.
      • happyopossum2 days ago
        &gt; Why does the mobile website know whether I have the app installed?<p>To clarify - the mobile website doesn’t. It has meta tags that tell safari what app it’s tied to, and safari displays associated the app banner.
    • MBCook1 day ago
      They did, long ago. I remember when it was shut down after someone made the problem public, like this.<p>I’m amazed Android still allowed this in 2022.
    • piyuv2 days ago
      Right, only Apple knows, but it’s ok, they’re the good guys
      • andrei_says_2 days ago
        Definitely not “good” but I’m still to see anything remotely resembling the complete disregard for privacy and security typical for the adtech-driven android ecosystem.<p>Just a different business model, not a display of moral values.<p>Sure, Pegasus exists but I don’t think it is commodified yet.
      • jmb992 days ago
        Ignoring the sarcasm...<p>What evidence is there&#x2F;can you present that Apple is making use of this information in a negative way?<p>How can Apple <i>not</i> have a list of installed apps on your phone while maintaining basic functionality (automatic updates, reinstalling apps from backup, etc)?
      • PaulRobinson2 days ago
        Sort of. They have a list of apps you&#x27;ve bought&#x2F;installed through app store, and they can figure out what you&#x27;ve deleted based on what your phone is pinging for update checks on.<p>If they went beyond that, or disclosed that knowledge, or allowed an app to get that manifest without your permission, it would destroy their brand image built around privacy, in a way that would cause long-term irreparable damage.<p>They decided to not comply with laws compelling them to add back doors to optional encryption on iCloud storage, rather than tarnish that image, because they know how valuable that trust is.<p>You can dump on Apple all you want, but compared to Google who plead with people to use their browser and phones to improve adtech surveillance they can monetize, I think they&#x27;re doing OK and are a <i>lot</i> more trustworthy.
      • criddell2 days ago
        &gt; they&#x27;re the good guys<p>In a relative way, they definitely are.
    • sfoley2 days ago
      It&#x27;s a clickbait title that needs to be changed to stop spreading misinformation.
    • buyucu2 days ago
      apple is the worst product for privacy. The entire ecosystem is closed source. You know nothing about what apple is doing.
    • ctippett2 days ago
      Are you sure? I know someone in adtech and I&#x27;m pretty sure Apple allows a similar app manifest that allows you to check for specific apps. I could be wrong.
      • czk2 days ago
        Not sure about the manifest but recently I&#x27;ve seen talk about some banking apps using SBSLaunchApplicationWithIdentifierAndURLAndLaunchOptions (undocumented function in SpringBoardServices) [0] to try to launch another app on the phone by the bundle id, and they can determine if it&#x27;s installed or not.<p>They were using this trick to detect unauthorized apps on the phone.<p><a href="https:&#x2F;&#x2F;blog.verichains.io&#x2F;p&#x2F;technical-analysis-improper-use-of" rel="nofollow">https:&#x2F;&#x2F;blog.verichains.io&#x2F;p&#x2F;technical-analysis-improper-use...</a><p>[0] - <a href="https:&#x2F;&#x2F;gist.github.com&#x2F;wh1te4ever&#x2F;c7909dcb5b66c13a217b49ea3e320caf" rel="nofollow">https:&#x2F;&#x2F;gist.github.com&#x2F;wh1te4ever&#x2F;c7909dcb5b66c13a217b49ea3...</a>
      • phony-account2 days ago
        &gt; I know someone in adtech and I&#x27;m pretty sure Apple allows a similar app manifest that allows you to check for specific apps. I could be wrong.<p>On iOS an app developer will need to register in advance which external applications their app intends to query, and the list needs to be very short and motivated. [1]<p>Incidentally, “I have a friend who says...” isn’t really a good citation anywhere outside Reddit - which HN resembles more and more each day.<p>[1] <a href="https:&#x2F;&#x2F;www.hackingwithswift.com&#x2F;example-code&#x2F;system&#x2F;how-to-check-whether-your-other-apps-are-installed" rel="nofollow">https:&#x2F;&#x2F;www.hackingwithswift.com&#x2F;example-code&#x2F;system&#x2F;how-to-...</a>
        • ctippett2 days ago
          Thanks for the information.<p>I suppose a more appropriate term of phrase would&#x27;ve been &quot;I&#x27;d heard anecdotally...&quot;, but I agree I was lazy with my original reply. I appreciate the feedback.
          • refulgentis2 days ago
            You&#x27;re too kind, their reply was extremely rude to you. I have been here 16 years, been an iOS developer just as long, and have no idea why your comment is &quot;Reddit.&quot;<p>A simple thought exercise for me is &quot;Which of these two comments is more Reddit?&quot; - I&#x27;d say the one that came with curiosity is HN, the one that bats around half truths combatively and invoking Reddit isn&#x27;t.
          • collingreen2 days ago
            You&#x27;re nice. I don&#x27;t appreciate the extremely tired &quot;hn looks more and more like Reddit every day&quot; slop and I think you handled it with grace.
            • reaperman2 days ago
              Comparing HN to resdit is explicitly against HN guidelines. Though sometimes I think the only reason it’s never “true” is because Reddit is a moving target. Both HN and reddit get worse over time, so HN never catches up to how bad Reddit is.<p>Also the bots have not invaded HN, which is a truly massive distinction.
              • phatskat2 days ago
                &gt; Both HN and reddit get worse over time<p>I think this is probably true of any online community. I’d wager that an online community needs more users to grow and be sustainable, and more users inevitably means more content, and more content means less _high-quality_ content overall.
        • robin_reala2 days ago
          Could you take a moment of your time to read the last point in the HN Commenting Guidelines? <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;newsguidelines.html">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;newsguidelines.html</a>
        • swat5352 days ago
          Is that also the case for alt-store apps available in EU ?
        • refulgentis2 days ago
          I don&#x27;t think it is worth being dismissive.<p>I snorted when I got to the self-important haughtiness about reddit.<p>Why?<p>- You immediately recognized what they meant.<p>- They weren&#x27;t advancing a claim, they were indicating a basis for their interrogative, likely to avoid seeming naive when claiming it out of nowhere.<p>- The article we&#x27;re commenting on describes the same mechanism you claim differentiates iOS. (&quot;register in advance...which applications...intends to query, and the list needs to be very short and motivated.&quot;)<p>- I&#x27;ve worked heavily on iOS and Android since 2009. As close to a graybeard as you can get in mobile. I&#x27;m searching, reaching, grasping for any sign you&#x27;ve done anything other than Google and link the first article you saw, and I can&#x27;t find _any_. At all. But I don&#x27;t think that&#x27;s wrong. You&#x27;re trying. Why is it wrong for the person you asked to try too?<p>- There&#x27;s strong signs you didn&#x27;t read the article we&#x27;re commenting on.<p>- If you had, it is unlikely you would have said iOS was differentiated, then laid out the exact same mechanism described in the article.<p>- There&#x27;s strong signs you didn&#x27;t read the article you linked.<p>- On iOS you can register <i>URL schemes</i> in a plist, these aren&#x27;t &quot;external applications you intend to query&quot; and the list does not have to be &quot;very short and motivated&quot;<p>I get cranky too, but, I am grateful I recognize it is very reddit to cry Reddit and edit it out, or delete.
          • phony-account2 days ago
            &gt; There&#x27;s strong signs you didn&#x27;t read the article you linked.<p>What could possibly indicate I didn’t read the article? Of course I read it. Isn’t your assumption of my bad faith also explicitly against HN’s guidelines?<p>&gt; On iOS you can register URL schemes in a plist, these aren&#x27;t &quot;external applications you intend to query&quot; and the list does not have to be &quot;very short and motivated&quot;<p>I’m also an iOS developer- and yes it does.
            • cosmic_cheese2 days ago
              Yeah Apple used to be more loose with registered URL schemes, but tightened up a few years ago ands so now if you submit with a huge list of schemes the app has no good reason to use you’re going to get bounced.
            • refulgentis2 days ago
              &gt; What could possibly indicate I didn’t read the article?<p>What I laid out, namely, that you described iOS the same as the article, while simultaneously claiming iOS differs significantly.<p>&gt; On iOS you can register URL schemes in a plist, these aren&#x27;t &quot;external applications you intend to query&quot; and the list does not have to be &quot;very short and motivated&quot;<p>&gt; I’m also an iOS developer- and yes it does.<p>Which part is &quot;yes it does&quot;?<p>We both can agree quite quickly that URL schemes in a plist aren&#x27;t &quot;registering apps.&quot; You can drag this out a couple turns by playing shell games first by ignoring the URL schemes difference, then by making me do the leg work to show it&#x27;s trivial to find apps with dozens of apps in that list.<p>Either which way, I continue to be taken aback by your snarkiness towards the original post and cries of Reddit given you know you were 100% wrong on this.<p>You&#x27;re in a really bizarre situation where too much territory was staked out and you&#x27;re defending it all: you can&#x27;t claim this was a remotely accurate description <i>and</i> you read the article about Android <i>and</i> iOS is different. It&#x27;s already a farce, then throw in scolding about how HN is Reddit because of low quality posts...my goodness, my friend.<p>&gt; Of course I read it. Isn’t your assumption of my bad faith also explicitly against HN’s guidelines?<p>No, because I said &quot;There are strong signs&quot;, I didn&#x27;t say &quot;You didn&#x27;t read it.&quot;<p>Also, why would not reading be &quot;bad faith&quot;?<p>You are extremely focused on making attacks and perceiving them in others, please take a step back and note: &quot;But I don&#x27;t think that&#x27;s wrong. You&#x27;re trying. Why is it wrong for the person you asked to try too?&quot; - you shouldn&#x27;t have to make up an interpretation where gently chiding you for being rude turns into invoking rules and accusing you of bad faith
  • Tmpod2 days ago
    It requires root, but you can block&#x2F;spoof this with an LSPosed[1] module such as XPrivacyLua[2]. I hear there&#x27;s also the closed-source AppOps[3], but I&#x27;ve never used it.<p>[1]: <a href="https:&#x2F;&#x2F;lsposed.org" rel="nofollow">https:&#x2F;&#x2F;lsposed.org</a> [2]: <a href="https:&#x2F;&#x2F;github.com&#x2F;M66B&#x2F;XPrivacyLua" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;M66B&#x2F;XPrivacyLua</a> &#x2F; <a href="https:&#x2F;&#x2F;github.com&#x2F;0bbedCode&#x2F;XPL-EX" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;0bbedCode&#x2F;XPL-EX</a> [3]: <a href="https:&#x2F;&#x2F;appops.rikka.app" rel="nofollow">https:&#x2F;&#x2F;appops.rikka.app</a>
    • dheerajvs2 days ago
      I&#x27;ve not heard of XPrivacyLua, which is by the same author of the excellent NetGuard[0], which I&#x27;ve been using for years.<p>Interestingly XPrivacyLua is not supported anymore and the pro companion app will be removed from the Play store by Google because it uses the permission QUERY_ALL_PACKAGES.[1]<p>[0]: <a href="https:&#x2F;&#x2F;github.com&#x2F;M66B&#x2F;NetGuard" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;M66B&#x2F;NetGuard</a> [1]: <a href="https:&#x2F;&#x2F;xdaforums.com&#x2F;t&#x2F;closed-app-xposed-6-0-xprivacylua-android-privacy-manager-unsupported.3730663&#x2F;page-325#post-87086407" rel="nofollow">https:&#x2F;&#x2F;xdaforums.com&#x2F;t&#x2F;closed-app-xposed-6-0-xprivacylua-an...</a>
      • Tmpod2 days ago
        Indeed, it is a shame. However, XPL-EX is a fork (though with much internal code (re)written at this point) with even more capability, while maintaining the familiar and simple UI. Seems pretty neat!
  • cheschire2 days ago
    Can windows apps (not installed from the MS store) enumerate through the window titles of all open windows? How hard would it be for an app to monitor all of your web traffic based on the title alone?<p>Legit question. ChatGPT isn&#x27;t super helpful here since it agrees with everything when I&#x27;m really looking for someone to say why this isn&#x27;t really feasible in the real world.
    • userbinator2 days ago
      Long-time Win32 programmer here - yes. This is by design. To use an analogy, Windows is like a &quot;high-trust society&quot;.<p>There are functions EnumWindows() and EnumChildWindows() specifically for this purpose.<p>See utilities &quot;Windows Modifier v2.00&quot; (when I first downloaded it there were many pages about it, but it&#x27;s a sign of how forgetful the Internet has become that I barely get any results about it now even searching for that exact name) and Microsoft&#x27;s own Spy++ (SPYXX.EXE) for an example of this functionality.<p>The solution to an app you don&#x27;t trust is to not use it at all, or use it in a VM.
      • phyzix57612 days ago
        How do you identify apps that you shouldn&#x27;t trust? Sometimes trust is assumed only until evidence is given that trust shouldn&#x27;t be given. Which makes no sense to me. Why was the initial trust so easily given?<p>A solution is to not use third party apps but most people aren&#x27;t going to go that route. The VM idea is a good option though.
        • pjerem2 days ago
          &gt; Why was the initial trust so easily given?<p>Because this architecture predates the existence of the current privacy nightmare.<p>In fact it predates the general availability of the internet. How could a program you would install from a floppy&#x2F;compact disk bought on a store behave maliciously if you didn’t or barely had access to the internet ?<p>And then it stayed like this because Windows is heavily marketed as being retro compatible.
          • userbinator1 day ago
            It&#x27;s also from a time when corporate mass surveillance was universally hated, software was not a service, and &quot;phoning home&quot; or requiring an Internet connection considered unacceptable to the majority of users.
    • ranger_danger2 days ago
      Not only can most apps see the titles of all other open windows on the system, but they can log all your keystrokes, take screenshots, record audio&#x2F;video of you or your screen, or copy&#x2F;delete all the files in your home directory, without any explicit permission or notification.<p>This is at least true for Windows and most traditional (X11 at least) *nix systems.<p>That is one thing I think Android got right... by default it runs every application as a different user. That means different home folders and no visibility into other apps.
      • esprehn2 days ago
        Originally Android apps could draw over top of any other app though which is a phishing nightmare. It took them a long time to make that a permission, and then everyone granted it until they finally added the bubbles API recently.<p>Permissions are difficult to get right, and Android is unfortunately pretty slow to react.
      • Numerlor2 days ago
        On windows you shouldn&#x27;t be able to do (most of) these directly with apps running under admin, though that&#x27;s a small consolation when the browser is a normal process.<p>I&#x27;m not sure if we&#x27;ll get away from these anytime soon as any out of the box solution will inherently limit the user&#x27;s freedom that has persistently been there for decades on PCs
        • ranger_danger2 days ago
          I have absolutely done all of these things on Windows, even for commercial applications. Programs that keylog (i.e. calls SetWindowsHookEx) sometimes get tagged by antivirus though.
    • tredre32 days ago
      &gt; How hard would it be for an app to monitor all of your web traffic based on the title alone?<p>Although not terribly accurate (because of the high variability of page titles), tools like ManicTime and ActivityWatch use windows titles to track your browser history if you don&#x27;t install the browser plugin.<p><a href="https:&#x2F;&#x2F;www.manictime.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.manictime.com&#x2F;</a><p><a href="https:&#x2F;&#x2F;activitywatch.net&#x2F;" rel="nofollow">https:&#x2F;&#x2F;activitywatch.net&#x2F;</a>
    • bcoates2 days ago
      Windows has a whole different (looser, older) security model. There are no security barriers between windows running on the same desktop. (In particular, &quot;UAC is [still] not a security barrier&quot;--when you hit ok&#x2F;type in a password to elevate a process, you’re effectively elevating the whole desktop and everything you&#x27;re running.)
      • jorvi2 days ago
        No, that is completely wrong and would be nuts. The only way the whole session gets elevated is if you&#x27;d launch explorer.exe with an admin token.<p>The way privilege escalation works on Windows is that pretty much everything gets launched with a standard user access token by default, and processes can request an admin access token in a few ways, UAC being the main one. When a process is supplied that token, <i>that process</i> is elevated.<p>It is more akin to &#x27;sudo&#x27; rather than &#x27;su&#x27;, which makes sense because its progenitor is &#x27;runas&#x27; from Windows 2000.
        • bcoates2 days ago
          (Only) the process is elevated, but the process has a window on a shared session, and the OS does not successfully protect processes that share a session (and user, and registry, and disk, etc., etc.) from controlling each other.<p>From an API point of view, only one process is elevated. From a security point of view, if one process is elevated they all are, due to a lack of any effective mechanism that actually stops them.
          • jorvi2 days ago
            No, even then there are things like Mandatory Integrity Control and Windows Message Restrictions &#x2F; UIAccess. I&#x27;d dive into to deeper but I just got home from going out haha. Those terms should help you dig into it though!<p>I do fully agree that desktop OSes are a legacy security model and they can&#x27;t hold a candle to that of iOS. Android is getting there, but because it also started from mostly an open all-access model it&#x27;s been having the same warts.
      • SpaghettiCthulu2 days ago
        Can you inject into an elevated process from a non-elevated one?
    • myself2482 days ago
      Oh yeah, AutoHotKey&#x27;s ability to do this actually underlies a lot of useful AHK scripts.
      • yjftsjthsd-h2 days ago
        Right; I think having the API exist is a good thing, it&#x27;s just a question of making sure that it&#x27;s only used in ways that the user allows. Your own scripts inspecting and controlling arbitrary windows on your own machine =&gt; great, third party programs doing the same thing without your informed consent =&gt; bad. (In practice, this means I&#x27;m a big fan of extensive permission systems that have the ability to deny or fake responses at the user&#x27;s direction)
    • gruez2 days ago
      Most windows apps aren&#x27;t sandboxed, so them being able to grab window titles is the least of your worries. Any program can steal your login sessions and passwords if they wanted to.<p><a href="https:&#x2F;&#x2F;xkcd.com&#x2F;1200&#x2F;" rel="nofollow">https:&#x2F;&#x2F;xkcd.com&#x2F;1200&#x2F;</a>
      • facile32322 days ago
        Are you essentially discussing like a keylogger? I can&#x27;t imagine windows intentionally keeps the plaintext password anywhere longer than it needs to be.
        • 9dev2 days ago
          That, but consider also how an application running with your user privileges has full access to the filesystem with those privileges, so it can read your entire home directory, for example. That includes your browser profile with all cookies, and all credentials that applications store there unencrypted. Not to mention how that allows for all the fingerprinting even the most nefarious marketer could wish for.<p>Oh, and the UAC confirmations to elevate your apps permissions to root? People will gleefully confirm them without reading what needs access anyway, so you’re golden to do whatever you want.<p>The security model of Windows doesn’t exist.
        • halfcat2 days ago
          &gt; <i>I can&#x27;t imagine windows intentionally keeps the plaintext password anywhere longer than it needs to be.</i><p>Can’t tell if serious or not [1]. Also any program can read any saved password out of Windows Credential Manager.<p><a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Mimikatz" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Mimikatz</a>
        • gruez2 days ago
          Obviously there&#x27;s no way for a malicious program to grab your login credentials that you&#x27;ve entered into an incognito tab that have been closed. There might not be sandboxing, but viruses can&#x27;t timetravel yet. However that&#x27;s not going to be much of a defense when many users use password managers, and are terrible at detecting malware (so it&#x27;s only a matter of time before their passwords are keylogged).
          • misnome2 days ago
            &gt; viruses can&#x27;t timetravel yet<p>_Windows Recall to the rescue!_
        • Eavolution2 days ago
          Actually windows can keep them in memory for a lot longer than you&#x27;d think, hence Mimikatz <a href="https:&#x2F;&#x2F;github.com&#x2F;ParrotSec&#x2F;mimikatz" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;ParrotSec&#x2F;mimikatz</a>
        • justonenote2 days ago
          ita disconcerting to see such naivety around security issues on hn.<p>not that windows is keeping passwords in plaintext, but that it&#x27;s not immediately obvious that un-sandboxed apps that run on your windows&#x2F;linux&#x2F;mac desktop have virtually unlimited other avenues to capture passwords given they can read the entire state of other windows at the very least.<p>I dunno maybe macos is slightly better, and wayland definitely has some things which are better about this, but desktop os and $locally_installed_app means $locally_installed_app basically has root, there is just an exploding amount of vectors.<p>I&#x27;d like to see a linux based distrubution use some of the sandboxing in Android, it would be a order of magnitude improvement over what is going on now.
    • edoceo2 days ago
      Yep, not difficult at all.<p>This prompt got me some mostly looks OK Python<p>&gt; Can you make a simple windows program that will get all the window titles from active programs running
      • halfcat2 days ago
        Definitely possible. This is how chat bots worked on AOL in the 90’s, basically the FindWindow and FindWindowEx functions in the win32 API. Hasn’t changed much (if any) since then.
    • kelvinjps102 days ago
      In windows you can there is a api for windows titles, I knwo because I was building an app that needed it
  • hnburnsy2 days ago
    &gt;For extremely specific use cases such as file managers, browsers or antivirus apps, Google grants an exception by allowing QUERY_ALL_PACKAGES permission, which provides full visibility into installed apps.<p>&#x27;Extreme&#x27; my a*. My bank app has this permission, as well as my camera app, contacts app, clock app, Google Home, and on and on. My bank app was moved to an old iPad because of this.
    • silenced_trope2 days ago
      yea I used to work for an advertising network and every game that implemented the Android SDK ended up with this permission, it was a way that we used to not show ads for games that the user already had on their phone
  • weinzierl2 days ago
    <i>&quot;the one that blue tick twitter accounts living in certain pin codes of Bengaluru passionately discuss amongst themselves for a week every year&quot;</i><p>To someone embarrassingly unfamiliar with Indian culture, what does it mean?
    • thatloststudent2 days ago
      I want to expand on this more as someone more familiar with Bangalore&#x2F;Bengaluru.<p>Almost like clockwork, Blume Ventures releases a report every year about the state of the Indian startup ecosystem that year, and since Bengaluru startups are almost all concentrated around Koramangala or HSR layout (these are places inside Bengaluru with their own PIN&#x2F;address codes), you&#x27;ll find a lot of people talking about that online.
      • gopkarthik2 days ago
        ^ This.<p>You can read the reports at <a href="https:&#x2F;&#x2F;blume.vc&#x2F;reports&#x2F;indus-valley-annual-report-2025" rel="nofollow">https:&#x2F;&#x2F;blume.vc&#x2F;reports&#x2F;indus-valley-annual-report-2025</a> or archives at <a href="https:&#x2F;&#x2F;www.indusvalleyreport.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.indusvalleyreport.com&#x2F;</a> .<p>The ppt in the blog is from the 2024 report - <a href="https:&#x2F;&#x2F;docsend.com&#x2F;view&#x2F;zqgfupfzyud499hn" rel="nofollow">https:&#x2F;&#x2F;docsend.com&#x2F;view&#x2F;zqgfupfzyud499hn</a>. The India 1-2-3 framework is old though. IIRC it was coined by a retail sector founder (Kishore Biyani) in the 2000s.<p>Also Koramangala, HSR layout are also the more affluent localities in Bengaluru.
      • weinzierl1 day ago
        Thanks a lot. That makes total sense!
      • pavel_lishin2 days ago
        Would it be analogous to Silicon Valley in America?
    • xolve2 days ago
      Bengaluru&#x2F;Bangalore has hotspots (PIN codes are postal address codes) where there are lots of startups, mostly in ecommerce, ad-tech, online education etc. and they have incentive to upsell you a lot.<p>I guess its referring to someone wannabe influencer buying Twitter(X) premium and posting based on half baked info on customers.<p>Mostly sarcasm, so take with a grain of salt. I can&#x27;t tell about accuracy, but explaining the cultural context here.
      • weinzierl2 days ago
        Thanks, this is helpful. Is the certain week referring to a specific festival?
        • evertedsphere1 day ago
          presumably the report comes out every year and it&#x27;s discussed for some time after that
        • xolve2 days ago
          I don&#x27;t know, sounds like any week.
    • moi23882 days ago
      The PowerPoint he talks about and is displayed the line below it
      • weinzierl2 days ago
        I know but that does not clarify the connection between blue tick, certain pin codes and a certain week in the slightest.<p>Sure, these are probably all hints to affluent members of society but I was hoping for a more detailed explanation.
        • banqjls2 days ago
          Blue tick&#x2F;check = verified Twitter accounts, from when Twitter staff chose who to give the blue tick and only gave it to journalists, technologists, etc that the twitter staff wanted to amplify. Nowadays a blue check simply means you purchased premium, but we remember the original meaning. This is not an Indian thing.<p>PIN codes = postal codes.
          • weinzierl2 days ago
            Yes, the interesting question is which PIN codes is the author hinting at and which week of the year and why. This is what I want to know. I think I can figure out the rest myself.<p>But while we are at it: What is the significance of a cow trading app. Is it used by people who treat cows as sacred or the opposite?
            • Slitted1 day ago
              I’m sorry but I have to bring this up: are these comments bait? The questions are a little too naive yet purposeful.
              • weinzierl1 day ago
                No, I was just in a different frame, seeking cultural significance while missing the obvious.<p>I expected something more along the lines of:<p>There is this cultural group some people refer to as WASPs, but they usually would not self-apply that designation. They are not a formal organization but more a fixed social group into which an individual is born within a particular system of social stratification.<p>Their cultural lives (and to a large degree their business processes) are organized along an annual cycle starting shortly after the northern winter solstice, even though they claim this is the date of birth of their religious leader. During that time and before a new cycle starts, their businesses practically come to a standstill for a week of celebrations.<p>A certain subgroup of them has become highly influential in the tech industry. Their most prominent leaders and their companies often gather in and around the zip codes 94024, 94040, 94301, 95014, 95030 in an area called <i>&quot;Silicon Valley.&quot; </i>
  • surmoi2 days ago
    Exodus Privacy will let you know about this kind of Android apps you should avoid installing <a href="https:&#x2F;&#x2F;exodus-privacy.eu.org&#x2F;" rel="nofollow">https:&#x2F;&#x2F;exodus-privacy.eu.org&#x2F;</a><p>Swiggy is actually a small player in terms of permissions requested, with &#x27;only&#x27; 47 Compare it to Weibo with 104, Wechat with 93, Facebook with 85, Snapchat with 71 (granted those apps may offer additional services that require some additional permissions, but they are definitely not worth giving them all your data...)
  • turrini2 days ago
    I don&#x27;t know if it is just me but I run every class of app in isolated &quot;islands&quot; (like work profiles) on Android. Browsers, banking apps, social media, instant messaging, tools, etc. Almost everything is isolated from another non related group.
  • einszwei2 days ago
    Just wow. I assumed that Google patched this few years back but guess they left a few backdoors.
    • gruez2 days ago
      It&#x27;s probably an oversight than a &quot;backdoor&quot;. They already have a &quot;frontdoor&quot; in the form of a permission that&#x27;s pre-granted to them by the OS, so there&#x27;s little need for them to devise backdoors like the android.intent.action.MAIN query that the blog post mentions.
    • I just don&#x27;t trust Google anymore. They are not the same as they were years ago and have just declined in general.<p>Play Store Review and everything takes weeks sometimes and I can&#x27;t tolerate that.
    • dhosek2 days ago
      I would pretty much assume that any Android phone is a massive privacy leak and security risk. I’d hope that an iPhone is better, but I’d be wrong.
  • solardev2 days ago
    Privacy issues aside, it&#x27;s kinda cool reading about how Indians use their phones, and also how they use English. I&#x27;d never heard &quot;beyond the pale&quot; before, and I&#x27;m still not sure what the idea of &quot;multiple Indias&quot; means when some of them are Mexico and some are Africa...?<p>I&#x27;ve also never heard of the majority of the apps being analyzed or tracked. Must be such a different world out there.
    • milesrout2 days ago
      Beyond the pale is commonly used in English. A pale is a stake, and it means beyond the boundary (set out by a fence with stakes, hence the phrase) of what is acceptable. It gaines popularity in the mid 19th century. It may be related to the term &quot;the Pale&quot; which referred to the better controlled more Anglicised part of Ireland around Dublin, but there isn&#x27;t enough evidence to be sure of this. Certainly not an Indianism anyway.<p>&gt;I&#x27;m still not sure what the idea of &quot;multiple Indias&quot; means when some of them are Mexico and some are Africa...?<p>Is it not pretty obvious? It is like the phrase &quot;middle America&quot;. It doesn&#x27;t literally mean a different country. It means different wealth categories: the Indians that when considered as a whole are economically equivalent roughly to Mexico, those roughly equivalent to Indonesia (poorer) and those roughly equivalent to Sub-Saharan Africa (poorest). There are ~1b Indians that are still so poor they aren&#x27;t realistically in the market for your startup app if it wants its customers to ever spend anything, there are ~300m Indians that could be in the market for some apps, but probably mostly free ad-funded ones, and there are ~150m Indians that are quite a good market because they will happily spend money on something that provides value.<p>I got all this just from reading the post btw.
      • solardev2 days ago
        Makes sense, thanks! I love reading about how other cultures do software.
    • rashidujang2 days ago
      From the context, what I gather was meant by the idea of &quot;multiple Indias&quot; was the socioeconomic status of different demographics in India and their app usage. The presence of specific apps gives a tell to which demographic they belong to.<p>In other words, the richest demographic used certain apps and was equated to folks in Mexico, followed by the less rich equated to folks in Indonesia and the poor to Sub-Saharan Africa.
    • Explore45261 day ago
      It&#x27;s the average cooldude marketing of self-proclaimed &quot;India 1&quot;, denigrating their own people and can&#x27;t think outside of labeling others as something else.<p>These people are extremely snobbish in person when you go past their sweet talks, who don&#x27;t understand much about people. I hated the &quot;real&quot; interactions and went back to being an IC in big tech.<p>Part of it is because they don&#x27;t understand them, part of it is because they &quot;understand&quot; via someone else who told them stuff (like a redditor assuming everything on r&#x2F;india is true), part of it is their own contempt of culture due to previous reasons (&quot;ah these people are beyond any repair!&quot;). Basically, ignorance in elites.
    • nsonha1 day ago
      In some former colonies, the dialect can be a snapshot of the language back in colonial time. Happens to names as well as expressions.<p>I learned this watching a stand-up routine by Malaysian comic Nigel Ng. He was explaining his first name.
  • photonthug2 days ago
    &gt; It&#x27;s worth acknowledging that there are some legitimate reasons for an app to check which other apps are installed on your phone. For example, an app might check which UPI apps are installed to show relevant payment options.<p>Nope! Nope, nope, nope. If you&#x27;re wondering how we got into this situation.. well, it&#x27;s exactly stuff like this. Weird to see someone who&#x27;s digging into it at all also making excuses for it.<p>No one ever said &quot;I want to avoid a single extra click once every other month, so I guess I better irrevocably open my data&#x2F;phone&#x2F;life up completely to megacorp forever&quot;. And they certainly did not say this about tinycorp. People just absolutely suck at adversarial thinking, and good guys need to do it for them before bad guys can. Do you want organized crime blackmailing your politicians about dating apps and infidelity? Do you want to make it easy to do large scale targeting of ${vulnerable_people} the next time the cultural or political climate shifts?<p>Come on. Anyway shouldn&#x27;t the phone OS itself handle this rather than apps launching apps?? If not.. just let people pick a payment option, and then throw an error if the option is not available.
    • Explore45261 day ago
      Yes, the phone can handle the UPI intent.<p>What actually needs to be done is to remove the &quot;default&quot; feature and ask every-time.<p>For finer control (get ₹X off on using Y app), apps can make their own intent.
    • qwe----32 days ago
      &gt; &quot;I want to avoid a single extra click once every other month, so I guess I better irrevocably open my data&#x2F;phone&#x2F;life up completely to megacorp forever&quot;<p>Nah, it&#x27;s super annoying when I click on a link and don&#x27;t get redirected to the native app. This happens way more then once a month. Web experiences are much worse for many things.
      • photonthug2 days ago
        Cool but the attitude of “bring on the dystopian future as long as it’s more convenient for some people some of the time” is still confusing to me. Do you imagine that leaked information like this has never gotten someone killed before, and never will in the future?
      • hollow-moe2 days ago
        Good, because this is what Intents are for. No app needs to know all your installed apps to launch them with a link.
  • djrj477dhsnv2 days ago
    Anyone know if GrapheneOS has protection against this?
    • switch0072 days ago
      It doesn&#x27;t afaik. Only indirectly through multiple profiles<p>I was kind of surprised<p><a href="https:&#x2F;&#x2F;discuss.grapheneos.org&#x2F;d&#x2F;13302-query-all-packages-permission-in-grapheneos" rel="nofollow">https:&#x2F;&#x2F;discuss.grapheneos.org&#x2F;d&#x2F;13302-query-all-packages-pe...</a><p><a href="https:&#x2F;&#x2F;discuss.grapheneos.org&#x2F;d&#x2F;7800-how-to-mitigate-identifiability-from-google-accessing-installed-apps&#x2F;9" rel="nofollow">https:&#x2F;&#x2F;discuss.grapheneos.org&#x2F;d&#x2F;7800-how-to-mitigate-identi...</a><p><i>Later</i><p>For the wider audience: though don&#x27;t take this as GrapheneOS doesn&#x27;t care about privacy. I&#x27;m sure there are reasons (I didn&#x27;t read all of the linked threads) and it gives you plenty of other protections and tools - eg profiles, ability to disable all network access by app etc
      • fph2 days ago
        A rationale from the core developer [1]:<p>&gt; I&#x27;m sure there are plenty of system APIs providing this information too, and I don&#x27;t just mean APIs designed to directly provide the information.<p>&gt; It&#x27;s not useful to prevent directly getting a list of installed applications without preventing detecting which applications are installed, so this specific feature request has to be rejected. It would have to be part of a larger, much more comprehensive feature preventing apps from finding other apps. That implies outright preventing communication with non-system components which is a much different approach to applications and rules out a lot of things. [...]<p>&gt; The request should be for preventing apps from discovering which apps are installed, since anything less than that has no privacy &#x2F; security value. There&#x27;s no point in disallowing access to a list while not preventing discovering which apps are installed anyway.<p>The open issue to restrict app visibility is [2].<p>[1] <a href="https:&#x2F;&#x2F;github.com&#x2F;GrapheneOS&#x2F;os-issue-tracker&#x2F;" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;GrapheneOS&#x2F;os-issue-tracker&#x2F;</a> issues&#x2F;149#issuecomment-553590002 [2] <a href="https:&#x2F;&#x2F;github.com&#x2F;GrapheneOS&#x2F;os-issue-tracker&#x2F;issues&#x2F;2197" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;GrapheneOS&#x2F;os-issue-tracker&#x2F;issues&#x2F;2197</a>
        • djrj477dhsnv2 days ago
          I get what he&#x27;s saying, but still seems like blocking the easy way of getting a list of apps, while certainty not perfect, would prevent most privacy abuse.
          • aucisson_masque2 days ago
            Yes.<p>Privacy is not an on off switch, it&#x27;s about making things leak data less.<p>I really don&#x27;t understand grapheneos development sometimes, like when they refuse to make a setting to invert the back and recent button. Yes it&#x27;s not part of AOSP but it&#x27;s so simple to do and a feature that all manufacter offer because people want it, refusing to do that is weird imo.
    • subscribed1 day ago
      Not yet but it&#x27;s on the road map. <a href="https:&#x2F;&#x2F;github.com&#x2F;GrapheneOS&#x2F;os-issue-tracker&#x2F;issues&#x2F;2197" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;GrapheneOS&#x2F;os-issue-tracker&#x2F;issues&#x2F;2197</a>
  • therealmarv1 day ago
    It&#x27;s a known fact in the rooting community because some banking apps searching for root only apps!<p>If you root (I advice against doing that) and have LSPosed installed you can hide apps to be seen by every other app with Hide My Applist (HMA) [1] or HMAL (which I like more because it is more minimalistic) [2]<p>[1] <a href="https:&#x2F;&#x2F;github.com&#x2F;Dr-TSNG&#x2F;Hide-My-Applist" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;Dr-TSNG&#x2F;Hide-My-Applist</a><p>[2] <a href="https:&#x2F;&#x2F;github.com&#x2F;pumPCin&#x2F;HMAL" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;pumPCin&#x2F;HMAL</a>
  • rkagerer2 days ago
    Can you see in the Play store before installing an app exactly which other apps it&#x27;s allowed to talk to? Can you see it on your phone and override?
    • gruez2 days ago
      No, not in any straightforward way, although you can theoretically:<p>1. download the APK from a mirror site<p>2. disassemble it to get the android manifest<p>3. inspect the android manifest to check for the things the blog post discusses
  • RKFADU_UOFCCLEL2 days ago
    This is to be expected though, a phone platform isn&#x27;t exactly Tor Browser. The big API as with any platform will have plenty of ways to fingerprint people even without this one example, unless the developers went far out of their way from the beginning to build prevention in. Much like how on UNIX you can see what processes everyone is running and their command lines.
  • Yaggo2 days ago
    The title should read: &quot;Everyone knows all the apps on your <i>Android</i> phone&quot;
  • bustling-noose2 days ago
    Very simple:<p>Big companies like Swiggy and Zepto will mine the F out of your data. Some of it is for their benefit but some of it they could sell in the future. These so called founders are really just another wolf of app street looking to pump and dump. So when they do dump, or when some VC comes with money, they don’t just sell their app they sell it as a whole package of data and analytics that some company can use to sell their product or something VC can leverage to sell their stock to someone else. It’s not that difficult.<p>As far as smaller apps go these apps outsource their development to people who come with ‘packages’ to develop and maintain their app. These packages are the same logic as above but it’s just that they come from some template so you might be asked for location permission or camera or microphone by some really random app that has nothing to do with it.<p>While the quality of iOS is degrading, some of these things are really important and simply work better on iOS.
  • DeathArrow2 days ago
    &gt;Please remember the next time you casually install an app on your Android device, this information is being broadcast to the whole world. Data brokers will use it to profile you, cross-reference it with data about you from other ad networks and eventually it will be used to decide how much you’ll be asked to pay the next time you order a samosa.<p>Who are those data brokers? Are they publicly known? Do they have an API where a business sends customer ID, mail or something and get an spending profile that helps adjusting price for a particular customer?<p>I know this sounds evil. But didn&#x27;t banks and insurance companies collaborate to profile their customers since tens of years ago? That is not similarly evil?
  • amelius2 days ago
    &gt; I don’t even know where to begin unpacking this madness. How is knowing whether I have the Xbox or the Playstation app installed on my phone essential to their Swiggy&#x27;s core functionality?<p>Probably has to do with feeding adtech&#x27;s hunger for personal information, or fingerprinting maybe (not sure if that&#x27;s a thing in the context of phone apps).
  • avsteele2 days ago
    If they just audited apps and banned companies from the app store for abuse it would do a lot to curb this behavior. This is feasible, there just aren&#x27;t THAT many popular apps at any given time.
    • whatevertrevor2 days ago
      They could start by at least closing the MAIN intent filter loophole.
  • HackerThemAll1 day ago
    Thank you Google&#x27;s &quot;top talent&quot; Android devs for this permission system full of loopholes.
  • TekMol2 days ago
    <p><pre><code> So I downloaded a few dozen Indian apps I could think of on top of my head and started reading their manifest files </code></pre> How do you download apps from the Android app store and read their manifest files?<p>Does this mean one could make a website that lists all those manifest file, so the users could decide against using apps that use this loophole?
    • Etheryte2 days ago
      Yes, it&#x27;s called alternative app stores and there&#x27;s quite a few of them around.
      • TekMol2 days ago
        Hmm.. how do the apps from the Android app store get into the alternative app stores? And how do you know they are the same app and not altered?
    • Explore45261 day ago
      You can get APKs for each installed app
  • Tewboo2 days ago
    It&#x27;s true, our phones are like little windows into our lives. The apps we have reflect our habits and interests.
  • bloomingeek2 days ago
    Perhaps crazy question: is it a good idea to have two phones now? One for making calls only, with as many apps as possible removed. And another phone for email, web surfing, photos, etc...?<p>edit: Oops, I left out texting. Which phone for that?
    • subscribed1 day ago
      If you don&#x27;t need ANY apps on your main number, good dual-Sim feature phone (but be extremely picky, some are utter trash).<p>The for all the smart stuff, Pixel 6 with GrapheneOS. You can confine various &quot;classes&quot; off apps to dedicated profiles, so they&#x27;ll never know of each other, and you get a vastly improved security (multiple releases in the month) and significantly improved privacy.
    • dvrj1011 day ago
      phones had&#x2F;some still have user profile&#x2F;account option so you can do this on a single phone
      • Explore45261 day ago
        Why is that feature removed by companies? It still exists in vanilla Android, but for some reason the phones sold don&#x27;t have it.
    • monsieurbanana2 days ago
      You still make calls with your phone?
      • bloomingeek2 days ago
        Of course, amazingly that&#x27;s one of it&#x27;s best features, enabling you to actually speak to a real person. (it&#x27;s a type of personal connection that fleshy robots have, for some reason, derided.)<p>But I digress, excusing your bad form of answering a question with a question, I am interested in your opinion of the possible conundrum of the two phone idea.
        • monsieurbanana9 hours ago
          My bad, I didn&#x27;t knew you wanted a serious answer, I should have known that some people would seriously consider having three separate phones for texting, calling and everything else.<p>For a serious answer then: Rather than segregating phone calling vs the rest, if you want to go to the hassle of maintaining multiple phones, I would put sensitive apps (i.e. bank apps) separated from the rest.<p>But ultimately it depends on which threat model you are trying to mitigate. Most people would worry about protecting their financial information. If you are worried about possible backslash from a fascist state, you shouldn&#x27;t use normal phone calls at all and switch to a privacy app.<p>OTOH, a dedicated phone just to make phone calls makes sense if your threat model is your significant other.
  • OutOfHere2 days ago
    If Google truly cared about privacy, each app would run in its own strict jail, and permissions would be faked by default. Also, easy malware by Israel or anyone else would not be a thing. As it stands, apps know everything I am doing, and I get targeted spam email rather immediately.
    • JumpCrisscross2 days ago
      &gt; <i>If Google truly cared about privacy</i><p>Have they even been pretending on this front?
      • Speedy2182 days ago
        They put in a lot of work to make it seem like they do believe it or not, I&#x27;m not sure how well it is working out for them though.
    • brunoqc2 days ago
      &gt; apps know everything I am doing<p>I think I call bullshit on this.<p>But I agree that they could do way more and that they don&#x27;t seem to care.
  • nickvec2 days ago
    Just curious, why was this targeted specifically at Indian apps?
    • wcfields2 days ago
      The author is probably Indian based upon the blogs subtitle of “ tales from indian web rabbit holes. “
    • epistasis2 days ago
      The tag line for the blog is &quot;tales from indian web rabbit holes.&quot;
    • gopkarthik2 days ago
      Because the substack&#x27;s author focuses on Indian web. From their description: &quot;tales from indian web rabbit holes.&quot;
  • dTal2 days ago
    Another fantastic reason to strictly only install apps from F-Droid.
    • hnburnsy2 days ago
      My daily driver has minimal apps, most from F-Droid. An old iPad on my IOT network has any other apps needed.
    • JohnFen2 days ago
      How does that address the problem? Does F-Droid do some sort of additional screening to keep out apps that do this?
      • marcodiego2 days ago
        First, f-droid only accepts OSS apps, so the incentives for spyware is simply not there. Second, anti-features are explicitly marked on f-droid. Third, f-droid apps are curated like a very rigorous linux repo.
        • JohnFen2 days ago
          Being an OSS app is not sufficient protection. Most OSS apps aren&#x27;t terribly misbehaved, but some are. Being OSS in and of itself is not anything like a guarantee with this sort of thing.<p>&gt; Third, f-droid apps are curated like a very rigorous linux repo.<p>Yes, I know. My question is is this one of the things they&#x27;re screening for?
      • dandersch2 days ago
        packages on f-droid list all required permissions explicitly, and the mentioned permission seems to be listed as &quot;query all packages: Allows an app to see all installed packages.&quot;. It doesn&#x27;t mark the app as having &quot;anti-features&quot;, but you can at least make a more informed decision this way.
        • JohnFen2 days ago
          That&#x27;s pretty cool, but the article says that most apps that are doing this sort of thing aren&#x27;t using the query all packages permission and instead are using the facility to provide a specific list of apps they&#x27;re checking for, which is not permission-gated.
          • wkat42422 days ago
            It is. It specifically says that the apps must be declared in the manifest like other permissions. So it&#x27;s a specific permission for each app really. F-Droid could query that if it wants to (not sure if it does)
            • throwaway2902 days ago
              Did you stop reading before the post got to the MAIN loophole that doesn&#x27;t require the list of apps in the manifest? How does F-droid describe MAIN?
              • wkat42422 days ago
                Yeah I did as the article was a bit long. But I&#x27;m sure this is detectable too as it must be in the manifest.
                • throwaway2901 day ago
                  The article already showed it is detectable. But it is not detected by Google and I am unclear if F-Droid detects it either...
        • duskwuff2 days ago
          &gt; It doesn&#x27;t mark the app as having &quot;anti-features&quot;<p>I suppose they must be too busy ticking off &quot;anti-features&quot; like &quot;can communicate with non-Free services&quot; to notice that sort of thing.<p>(No, really. F-Droid will tag applications like a Mastodon client as having &quot;anti-feature: Non-Free Network Services&quot;, presumably because it can be configured to connect to servers running non-free software?)
  • marcodiego2 days ago
    Well, things are particularly more complicated on my case: I don&#x27;t use google services and only install apps from f-droid.
  • anonym292 days ago
    You don&#x27;t have to sacrifice your privacy to use Android. GrapheneOS is a tremendous alternative, and even if you still need some Play Store applications, you can install a GMS compatibility layer and Play Store in either a secondary profile (recommended) or your main profile (not recommended) without granting Google unfettered control over your entire operating system. This compatibility layer offers a better reduction in attack surface and stronger hardening than microG.<p>Alternatively, you can continue with the standard setup, accepting that you’re willingly providing companies with an unprecedented level of access to your personal data. It’s puzzling that many seem more concerned about breaking a familiar routine than about the risks associated with sharing every detail of their lives with companies that, in turn, share that data with one (or more) hostile government(s).<p>There is certainly a lot of justified concern about government overreach and abuse of power on HN. It remains difficult to understand why many with these warranted concerns do nothing to adopt a more coherent and rational approach — such as merely <i>attempting</i> to protect their personal data by not deliberately and voluntarily feeding it entirely to companies that are secretly coordinating with the very same hostile governments these people <i>claim</i> to seriously fear and detest.
    • Explore45261 day ago
      The problem is GrapheneOS is Pixel only. They are prohibitively expensive, especially in India where the mobile market is very crowded and you get Snapdragon 8s gen 3 for ₹25k.
  • nsonha1 day ago
    Android is so broken, each app query should be explicitly approved by user, instead of by reviewer like this.
  • smallnix2 days ago
    Nice analysis. Google should take notice. Do worldwide used apps do this too?
    • einszwei2 days ago
      From the article - Facebook, Instagram, Snapchat, Subway Surfers, and Truecaller use this too
  • 65102 days ago
    If nothing is done why not require competing apps be uninstalled?
  • zer0zzz2 days ago
    My solution to this is to use the apps that come with my phone and avoid relying on anything else. Problem solved. I use signal, uber, MyChart (for my doctor), and some apps for banking but that is about it.
  • ErigmolCt2 days ago
    This is equal parts fascinating and horrifying
  • anymouse1234562 days ago
    IME, Apps usually represent an overly generous amount of contempt for the people who use them.<p>At best, it&#x27;s a designer&#x27;s hubris (mixed with contempt) like, &quot;You want to select some text out of your SMS message? I&#x27;ve decided. NOPE.&quot;<p>But mostly we&#x27;re treated with contempt simply because we&#x27;re an annoyance that is obstructing the goal of serving the actual customer (advertiser) who is paying for the work.<p>App Stores are no mystery. They are a funnel for rent-seekers and adtech info brokers.<p>If you think they are intended to benefit you in any way at all, you are badly mistaken.
  • zkiihne1 day ago
    I used QUERY_ALL_PACKAGES among other things for my app Limit Buddy (<a href="https:&#x2F;&#x2F;www.limitbuddy.com" rel="nofollow">https:&#x2F;&#x2F;www.limitbuddy.com</a>). It would be impossible to make the app without it. But for more normal use cases there&#x27;s no reason to have it.<p>Apple has a much more robust solution privacy wise with their ScreenTime API but it makes an app like Limit Buddy much harder to build.
  • aussieguy12341 day ago
    If I have Uber, but multiple competing apps on my phone and I grant Uber permissions to see that, will I get cheaper rides?
  • tmtvl2 days ago
    ...On Android. I&#x27;m sure I don&#x27;t have that problem on my Ubuntu Touch phone (if only because there are hardly any apps for it).
    • nolist_policy2 days ago
      Interesting, how does Ubuntu Touch sandbox apps? Does it have one-time permissions (like Android)?
      • tmtvl1 day ago
        I actually don&#x27;t know, I was just making a joke about the dearth of applications on UT. I&#x27;d expect it to have Snap-type sandboxing, but the Security and Privacy section of the settings app doesn&#x27;t tell me much.
  • whalesalad1 day ago
    android* phone
  • daft_pink2 days ago
    iPhone users reading this like…. I love my iPhone.
    • vanderZwan2 days ago
      If the article explained why iPhone was worse than Android at something they&#x27;d be like <i>&quot;whatever, I love my iPhone&quot;</i> so I don&#x27;t see how that statement adds any new information.
      • hu32 days ago
        I read some hours ago a comment to the effect of &quot;whatever, I don&#x27;t expect Apple to be good with AI so it&#x27;s okay for Siri to suck since forever, I still love my iPhone&quot;... I can&#x27;t help but be amused at a comment defending a 3 trillion USD company technical incompetence.
      • daft_pink1 day ago
        I’m not sure that’s true. I wish there was a foldable version of the iPhone.<p>I just think better privacy and security controls and stricter app guidelines are a reason people choose the iPhone over Android, so this really isn’t a surprise to people that have been paying attention. It’s the tradeoff we make for the walled garden approach, but I think it makes sense for a smart phone and less so for a general purpose computer.
  • napierzaza2 days ago
    [dead]
  • johntitorjr2 days ago
    [dead]
  • aaron6952 days ago
    [dead]
  • DeathArrow2 days ago
    TLDR, want privacy, don&#x27;t use Google products.
  • cyb0rg02 days ago
    [flagged]
    • nindalf2 days ago
      Is this an LLM generated comment, but in the style of a different website? I’d suggest tweaking the prompt.
  • bpbp-mango2 days ago
    android lmao
  • billfruit2 days ago
    Some apps like Obsidian needs permission to access every file on the device. It is surprising Obsidian isn&#x27;t getting called out on that very much.
    • wkat42422 days ago
      It&#x27;s because it stores the files there so you can sync them with other permissions. And also that your notes aren&#x27;t deleted like they would be if they were stored in the internal app storage. There&#x27;s more granular options for filesystem access available but if you implement them you limit yourself to the latest Android releases.<p>According to Exodus it has no trackers and it&#x27;s an open source app also so you can see what it does (though tbh I didn&#x27;t check that for the mobile one)<p>If there&#x27;s apps to call out there&#x27;s way worse than Obsidian.
      • billfruit2 days ago
        Obsidian isn&#x27;t open source by most reports.<p>Surely Obsidian do not to see all files on the device, it only really needs to see the files the user needs it to see.
        • wkat42422 days ago
          &gt; Obsidian isn&#x27;t open source by most reports.<p>On FreeBSD I can build a full copy from source (in fact I have to, there is no binary package). The only issue seems to be licensing, not source availability. Personally I don&#x27;t care about licensing (I completely ignore it all anyway) and it doesn&#x27;t stop you from inspecting the source code.<p>I think Obsidian is a really great package, I just happened to have moved over from OneNote which is horrible Microsoft mediocrity and doesn&#x27;t even have a Linux app. And the web version is really useless, it needs to refresh every day and it can only search within the same tab, not a whole notebook. Such a mess. Obsidian is so quick and efficient &lt;3 And there is full self-hosted syncing available, which I also use.
          • billfruit2 days ago
            Obsidian on Android source seems not available. Even generally the reports seems that source is not available.<p>May be the freebsd build is using some binary library packages?<p>A cursory search indicates that one of the freebsd &#x27;build-scripts&#x27; used for installing obsidian uses a binary package for obsidian itself, not building it from source.<p>It strange that about obsidian which seems to be rather popular here has many people thinking that it is open source, when it is not.
            • wkat42421 day ago
              You probably mean this one: <a href="https:&#x2F;&#x2F;github.com&#x2F;jgrafton&#x2F;freebsd-obsidian" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;jgrafton&#x2F;freebsd-obsidian</a><p>That&#x27;s just a user contributed thing though. It&#x27;s also just in the official ports collection. There&#x27;s only a makefile there and some config files for electron (electron is kinda a PITA to compile on FreeBSD because there&#x27;s no package)<p>Now, it can update itself automatically but it&#x27;s all JavaScript. No binaries.<p>But it&#x27;s safe enough for me anyway. Especially because the dev community uses it do much. If it did something untoward it would be noticed quickly.
              • billfruit1 day ago
                The &quot;official&quot; packages seems derived from the Nix build for Obsidian, which is using binary caches to get the Obsidian binary is what I could understand.
        • danparsonson2 days ago
          There isn&#x27;t a permission for that though - it&#x27;s all or nothing. I agree that it should be more granular; each app should really have its own scoped file storage area by default, with &quot;access anything&quot; being reserved for file browsers, backup software, etc.
          • billfruit2 days ago
            Android already has support for scoped storage. So it is not clear why Obisidian needs the whole file system permission.
            • wkat42422 days ago
              Yes but only later Android versions. If you start supporting those you need to move to the corresponding API level and that means to drop support for older ones. They probably don&#x27;t want to do that yet. This one is Android 10 and up, and the Android 10 version of scoped storage was quite basic IIRC so you probably want an even later one. I guess they still want to support older phones.
              • billfruit2 days ago
                At the cost of much lower data privacy for users.
    • subscribed1 day ago
      If I&#x27;m not mistaken this is because without this permission they can only see audio, video and image files. You wouldn&#x27;t be able to use it comfortably to do it&#x27;s job.<p>Personally I use it with Storage Scopes on GrapheneOS.
    • elric2 days ago
      I use Storage Scopes on my GrapheneOS android phone, works great. Can decide exactly which files or folders an app gets to access.