Summarizer

LLM Input

llm/8d7ff4a1-085d-4b84-a357-52acc95c6355/topic-1-45c2fff9-4824-40aa-9b52-dd72a30707cd-input.json

prompt

The following is content for you to summarize. Do not respond to the comments—summarize them.

<topic>
Internet Permission Security # Discussion about whether lacking INTERNET permission provides sufficient security, concerns about permissions being added silently in updates, debate over slippery slope of future permission additions
</topic>

<comments_about_topic>
1. >I would love to use this, but I don't want to allow a third party app with closed source to read all my notifications. This can read OTP passwords, full messages, etc. so it must be open source for me to consider it.

The app lacks the INTERNET permission so it can't really exfiltrate data even if it wanted to.

2. This is correct, but it is still a slippery slope. At some point the dev ends up adding internet permission (might be for legit reasons too), and lo and behold you are sharing your data. For something as sensitive as notifications, I really can't trust anything but open-source app which is vetted by a few seasoned people and hosted on F-droid.

3. If the permission is added in retrospect wouldn’t you still need to opt in?

fwiw i completely agree that oss is the way to go here

4. Is that actually required? I thought that was implicit

5. It's automatically granted but the app needs to declare it in order to access internet. Because of that it's not enough that the app _currently_ doesn't request internet permissions, because if it ever starts, it would be mostly transparent to a user

6. Yes. Without the permission all network requests will just fail.

7. You can silently add the permission in an update though. It's safe if you don't auto-update it I guess.

8. Fair enough, you only have my word on it (that it doesn't send any data to the Internet). But you do have my word :)

Another person requested that the app be open-sourced as well. I will look into that.

9. there is a very similar app with much bigger history and (obviously) greater reputation: BuzzKill. [0] it's paid, available on Google Play, has tons of features and then some.

also, I bet that Android platform forbids you from requesting the internet permission if you use some "dangerous" permissions, e.g. reading notifications.

EDIT: added link.

[0]: https://play.google.com/store/apps/details?id=com.samruston....

10. It does have rules for about 25 common apps already built in. I had considered making a feature to 'share' rules with other users of the app, but that would've required Internet access. And as you can see from the comments on this thread, nobody wants an app like this to send data :(
</comments_about_topic>

Write a concise, engaging paragraph (3-5 sentences) summarizing the key points and perspectives in these comments about the topic. Focus on the most interesting viewpoints. Do not use bullet points—write flowing prose.

topic

Internet Permission Security # Discussion about whether lacking INTERNET permission provides sufficient security, concerns about permissions being added silently in updates, debate over slippery slope of future permission additions

commentCount

10

← Back to job