On Wed, 07 Mar 2012 10:16:11 +0100 Jean-Marc Desperrier wrote: > The Android model is broken, but so was the permission pop-up model.
A good default determined by authors with the system highlighting the more dangerous ones requested but also maximising user configurability and overrides is always best, similar to defaults, preferences, advanced but also about:config. It would also be good to have a blacklist of permissions revoked from all apps or groups of apps. Of course adding all this may add to complexity and the likelyhood of permission escaping bugs. _______________________________________________ dev-security mailing list dev-security@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security