Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Great idea, I'm a bit worried about security. To have control over phone unlocking the app has to be pretty privileged, right?


It does not list any special privilege except drawing over other apps. I think the author could justify the network permission or they could remove it, but I personally don't consider it a big problem as-is anyway.

https://developer.android.com/training/permissions/requestin...

The Play Store lists these permissions:

* view network connections * full network access * run at startup * draw over other apps * prevent device from sleeping

The only one that gives me pause is "draw over" because it would allow the app to capture screen content, and that is only concerning because of "full network access" enabling it to send data. I'm not sure why this app would require _both_ of these permissions.

https://reports.exodus-privacy.eu.org/en/reports/com.actureu...


> does not list any special privilege except drawing over other apps

This one is huge though? You can e.g. imitate other apps' login forms and collect passwords.


The network is used for checking in-app purchase status, requests to Google Play only


It's 100% local only. No server side component, analytics or ads.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: