Top Product Ratings:  TVs  |  Digital Cameras  |  Computers  |  Cell Phones  |  Printers  |  Camcorders  |  Blu-ray & DVD Players  |  MP3 Players
Def Con 19: Android apps ask for too much power
Aug 8, 2011 8:48 AM

Ever wonder whether that app you're installing on your Android phone really needs the right to access your contacts, accounts, location, text messages, and phone calls?

In fact, Def Con attendees learned on Sunday, Android apps are often "overprivileged"—meaning they ask for more privileges during installation than they actually need to do their job.

Security experts Yekaterina Tsipenyuk O'Neil and Erika Chin reported that when they studied dozens hundreds of Android apps, they found that 31 percent of them were overprivileged. [corrected 8/11--Ed.]

With such a small sample of apps, that percentage can't be directly projected to the entire market of Android apps. But it does suggest that more than a few apps ask for a foot when all they need is an inch.

What's wrong with giving an app more power than it needs? For one, it may allow the app (or advertisers) to gather unnecessary personal information about you. And should a hacker or malicious software get access to your phone, it may let them do more damage than they otherwise could.

So the next time an Android app you're installing asks for a laundry list of privileges, consider whether it really it needs them all to perform its essential function. If not, don't install it.

RELATED:
Android malware now twice as common than six month ago
Tips: How to keep your mobile phone data out of thieves' hands

Defcon-android-1.jpg
This slide from O'Neil and Chin's demo shows the ways in which Android apps can be vulnerable.

—Jeffrey Fox

Next Steps

All Computer Ratings
Subscribers can view and compare all Computer Ratings.
Recommended Computers
Look at the ones that we chose as the best of the best.

Post a comment

Comments:

0
Expand All
Collapse All