-
I have to ask, but why "uninstall". Couldn't you just "deny" access to the location data, but still leave it installed?
Right there is says QP wants access to Location Data. If you do not want to provide that, deny it and uninstall. What more do you want RIM to do for you in this case? They've protected you as much as they can, but its up to you to do the rest.06-09-10 05:36 PM - This reply will get lengthy but I going to go into a bit of detail just so that people understand a little better about permissions.
I will admit for FlashOn to simplify the instructions I just say set permissions to allow. That was just laziness at the time of release (theres a whole back story to it, you can find it on the forums) so the release was rushed in a day to get it out. Anyhow, I never properly integrated the permissions manager to ask for the specific permission it needs, but it just needs input simulation enabled beyond the default and anyone who emails or contacts me to ask about it I let them know they can just leave everything else at default. When I get around to updating it again Ill fix that.
Beyond that my main apps... Wallpaper Changer doesnt need anything about default. SearchIt connects to google for suggestions and it will prompt for that. Leave It On requires input simulation and an SMS listener above default permissions so it prompts for that and nothing more.
Now that all being said if an app does request all permissions and they are granted they can do a lot of things that the user may not want.
When you grant an application trusted permissions you give it the default permissions RIM thinks is fair to give an application. It gives safe enough permissions that the app really can't "Spy" on the user or do much out of its little area.
When an app wants to go beyond that couple things could happen.
1) The OS will tell you that the app is trying to do something, for example, "MyApp is trying to establish an http connection with google.com" and gives the user the option to allow or deny this.
2) The app itself will prompt for permission, that is the "MyApp is requesting changes to its application control permissions" dialog that shows. The BB API allows for the app to check which permissions it has, and then prompt the user to change them if they are denied.
3) The app will fail. If the app doesnt check its permissions and is trying to do something that is denied the code will not run.
A properly written app will only ask for permissions it needs and nothing more.
So then what can an app do if all permissions are set to allow? Well this part is what can be scarey to people. A lot can be done. In theory an app could connect to a server and relay every email, sms, gps location etc... But keep in mind this is not specific of the BlackBerry OS, it could relate to any OS whether it be on the desktop or smartphone.
Ill use an example of SmrtGuard, its a great app and fits this example Im going to make. SmrtGuard its great in the way that if your phone is lost or stolen you can remotely wipe and track it. But what would stop an app developer from creating a spyware app to do the same thing? Nothing. So if those API were restricted by RIM apps like SmrtGuard would not be possible.
There are permissions to send and receive SMs, which could be used to spy on someone. But then we wouldn't have apps like CrunchSMS because it needs to send and receive SMS. Apps like BerryBuzz wouldnt be able to change the LED colour when a new SMS or email arrives because they too need to "listen" to them.
These are just a couple examples, the BB API has plenty more that can be done (and plenty it can't :P), that could allow for developers to do things that spy on users, but so does every other OS.
So yes to answer your question simply, a lot can be done with allowed permissions. It doesnt mean every app is spying on you or doing something it shouldnt. Thats why the best thing a user can do is educate themselves and just not allow everything an app requests if they are concerned. In my opinion RIM has done a decent job of letting the user know when an app is doing something beyond just normal permissions and gives them a chance to say no.
Also just to note, many many of the APIs that do anything beyond just basic stuff require the application to be signed. So a developer has to purchase signing keys from RIM (they dont cost much though) for their app to run.
If anyones really interested to see what is capable on a BB device you can have a look at the API here: BlackBerry JDE 5.0.0 API Reference a lot of it is easy to understand. Heres a description from Location (since it relates to the OP):
Sorry for going for so long but hope that answers some questionsThe Location class represents the standard set of basic location information. This includes the timestamped coordinates, accuracy, speed, heading, and information about the positioning method used for the location, plus an optional address.
06-09-10 07:11 PM
