On Wed, 07 Mar 2012 10:16:11 +0100
Jean-Marc Desperrier wrote:

> The Android model is broken, but so was the permission pop-up model.

A good default determined by authors with the system highlighting the
more dangerous ones requested but also maximising user configurability
and overrides is always best, similar to defaults, preferences, advanced
but also about:config.

It would also be good to have a blacklist of permissions revoked from
all apps or groups of apps.

Of course adding all this may add to complexity and the likelyhood of
permission escaping bugs.
_______________________________________________
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security

Reply via email to