Conversation

Notices

1. Electronic Frontier Foundation (eff@mastodon.social)'s status on Thursday, 20-Feb-2025 06:51:48 JST Electronic Frontier Foundation

   During our analysis of RedNote, we found that the app requests some very sensitive permissions, including location information, even when the app is not running in the foreground. This permission is not requested by other similar apps such as TikTok, Facebook, or Instagram. https://www.eff.org/deeplinks/2025/02/crimson-memo-analyzing-privacy-impact-xianghongshu-aka-red-note

   • Dianne Hackborn (hackbod@mastodon.social)'s status on Thursday, 20-Feb-2025 09:56:16 JST Dianne Hackborn

     in reply to

     @eff Um, on Android even if an app has said it may request background location (or other dangerous permissions) in its manifest, it won't get it unless the user explicitly approves it. In the case of background location, in current versions of Android this can't be given just through the normal runtime permission prompts -- the user needs to explicitly enable this in the additional special access control.

     The article seems to imply the app is silently getting this, when it actually can't?