Concern about security with my playbook

**ivanmac** · 01-09-2013, 11:14 AM

I am a New playbook user. I use it for work and play, I have it password protected. My concern is with downloading apps that want access to everything on my playbook, why do they need access to my files,plctures? Gps, location not that concerned about. I know I don't have to download them my question is why do they need access.

**bdguru** · 01-09-2013, 11:30 AM

If you go to the wheel icon on the top right of your PB. Then go into security. From there you can set the permissions for each app. I usally turn all my apps to NO. Hope this helps.

**AVPTI** · 01-09-2013, 11:31 AM

Depends on the app.

What apps are you concerned about?

**gwinegarden** · 01-09-2013, 11:43 AM

Some apps will not run if you do.

**ivanmac** · 01-09-2013, 11:48 AM

I was looking for a browser, so Air Browser was recommended, it wants access to all files, plctures, docs. Why? There were others also wanting this info. If I block it it doesn't work.

**Cynycl** · 01-09-2013, 11:53 AM

Well a file browser app won't work if it doesn't have access to your files.

**Crowezine** · 01-09-2013, 11:55 AM

Because Air Browser is a file browse not an internet one .

**ivanmac** · 01-09-2013, 12:08 PM

I understand giving access to files so app will work, my concern is when apps ask for access to files they are not collecting info about us and sending it out over Internet?

F2 · 01-09-2013, 12:18 PM

I agree with the original poster's message. While some apps do need access to certain aspects of the pb's system, some of them just ask for an arm and a leg. Obviously, a File Manager would need access to files. But does it need access to "Personal Info" (or whatever that very Broad Permission is called)? A gps program probably does need access to Location data but would a file manager or a game?

And, yes, some apps will totally refuse to run if you deny some of the Permissions they seek. And as I found out the other day, if you deny some on initial install, you may not be able to access them again. I had denied Kalemsoft and another app recently and could not change them since they did not appear in the Permissions' List at all after that. I had to do a Security Wipe to be able to fix them!

**Mr Donut** · 01-09-2013, 01:03 PM

Review the app in App World and give them a half star rating and explain why.

Maybe devs will get the message.

**Techno-Emigre** · 01-09-2013, 01:23 PM

This is an important conversation which could really benefit from including both consumer and developer voices. Security creeps me out a little and I know I have a lot to learn about this issue. I think it would make an interesting monthly CB byline. There are a number of other mobile security topics which could be included.

**Cynycl** · 01-09-2013, 01:23 PM

My concern is the apps that want the device ID info, mainly because I'm not sure what that consists of. I don't see any reason why this is necessary for any app other than appworld for purchases.

As far as leaving a bad review, these can just be removed/deleted. Try leaving a bad review for one of the Handster apps questioning why the app needs device ID permissions and see how fast they delete that review.

**Cynycl** · 01-09-2013, 01:26 PM

Originally Posted by F2

I had denied Kalemsoft and another app recently and could not change them since they did not appear in the Permissions' List at all after that. I had to do a Security Wipe to be able to fix them!

Would deleting the app and reinstalling not have allowed you to accept the permissions once again ?

**Mr Donut** · 01-09-2013, 01:29 PM

I don't know how app world works, but all the reviews I have made about security have appeared in the reviews. I don't delete the app until i have checked to see that my review is posted. But then again, I have only reviewed 3 apps.

F2 · 01-09-2013, 02:26 PM

Originally Posted by Cynycl

Would deleting the app and reinstalling not have allowed you to accept the permissions once again ?

Nope. I tried, three times, with reboots/restarts. Once it was denied, it was never installed with a Permission entry and never asked for Permissions again. I don't believe it was their fault but an OS issue. As I wrote, another app did it just after that and, it, too, never got listed again even after UN and REinstalls.

edited to add: The other app was Permissions for Pacemaker trial. I denied them on installation and it would not run after that. UNinstall/REinstall did not fix it. Only the Security Wipe fixed it.

**Cynycl** · 01-09-2013, 03:56 PM

Good to know. Thanks.

**bkurant** · 01-10-2013, 04:01 AM

But then we live in the era of Facebook... As one European paper said, Americans are willing to give away their privacy for a free hamburger.
Not sure if it is so, but still simply looking at the level of interest this post generated, there doesn't seem to be too much concern even among geeks.
Thank you for the post and everyone's comments.
It seems that as rim approves more and more android apps (which are the worst offenders) - more and more developers demand access to your device identifier, gps, etc in exchange for the privilege of using their product. In many cases, you also give them your money. It seems a very high price to pay for giving up your privacy. But that is just me.
Sure, some apps do need access to files or your gps. But now even apps like pb battery watch, epub boook readers, music for meditation etc are trying to grab your data and profit from it. Simply giving them access to Internet doesn't not satisfy these hogs.
Funny thing - when you try to install one of them, you still get a message (just like on your bb) that the app can be potentially dangerous. But don't worry, says rim - you can always change application permissions later. BS!!!! This new crop (or more appropriately crap) doesn't show up on your apps list. So, unlike your good old bb, pb doesn't offer the same level of security. Why?
I've been leaving 1/2 star reviews, but it is an uphill battle, as there very few apps (that I am interested in) which do not attempt to grab all the data. I wish app world would disclose in advance such apps, as it is such a waste of time installing the app, leaving a review, deleting it. On to the next app, installing, leaving 1/2.star review, deleting it. Again and again....
Would love to hear from brains out here - is there a way to run apps with limited permissions, which otherwise force-close themselves?