Native App Privacy - Revision history

Tom: /* Solutions */

2021-11-11T18:01:13Z

‎Solutions

2021-10-17T22:18:36Z

‎Context

2021-10-17T22:08:36Z

‎Context

2021-10-17T22:07:45Z

‎Context

2021-10-17T18:44:22Z

2021-08-19T19:59:53Z

‎References

2021-03-18T01:44:25Z

‎Solutions

2021-03-18T01:44:02Z

‎Solutions

2018-12-14T19:44:22Z

‎Context

2018-12-14T19:43:30Z

‎Context

@@ Line 37: / Line 37: @@
 |Accnt Info
 |-
-|Bluetooth
+|[[Bluetooth]]
+|
 |Radios

@@ Line 13: / Line 13: @@
 * Apple CKContainer manages all attempts to access user data on the device or in iCloud. https://developer.apple.com/documentation/cloudkit/ckcontainer
 * Windows (UWP) settings are on all Windows 10 computers, but do not seem to be shown anywhere on their documentation.  Just navigate start -> settings -> privacy -> app settings.
-* [https://www.nccoe.nist.gov/sites/default/files/library/sp1800/mdse-nist-sp1800-22a-draft.pdf NIST SP 1800-22A] points out, especially for BYOD, that <blockquote>An ineffectively secured personal mobile devicebvcould expose an organization or employee to data loss or a privacy compromise</blockquote>
+* On the very first page [https://www.nccoe.nist.gov/sites/default/files/library/sp1800/mdse-nist-sp1800-22a-draft.pdf NIST SP 1800-22A] points out, especially for BYOD, that <blockquote>An ineffectively secured personal mobile devicebvcould expose an organization or employee to data loss or a privacy compromise</blockquote>
 ==Problems==

@@ Line 13: / Line 13: @@
 * Apple CKContainer manages all attempts to access user data on the device or in iCloud. https://developer.apple.com/documentation/cloudkit/ckcontainer
 * Windows (UWP) settings are on all Windows 10 computers, but do not seem to be shown anywhere on their documentation.  Just navigate start -> settings -> privacy -> app settings.
-* [https://www.nccoe.nist.gov/sites/default/files/library/sp1800/mdse-nist-sp1800-22a-draft.pdf NIST SP 1800-22A] points out<blockquote>An ineffectively secured personal mobile devicebvcould expose an organization or employee to data loss or a privacy compromise</blockquote>
+* [https://www.nccoe.nist.gov/sites/default/files/library/sp1800/mdse-nist-sp1800-22a-draft.pdf NIST SP 1800-22A] points out, especially for BYOD, that <blockquote>An ineffectively secured personal mobile devicebvcould expose an organization or employee to data loss or a privacy compromise</blockquote>
 ==Problems==

@@ Line 13: / Line 13: @@
 * Apple CKContainer manages all attempts to access user data on the device or in iCloud. https://developer.apple.com/documentation/cloudkit/ckcontainer
 * Windows (UWP) settings are on all Windows 10 computers, but do not seem to be shown anywhere on their documentation.  Just navigate start -> settings -> privacy -> app settings.
 ==Problems==

@@ Line 3: / Line 3: @@
 ==Context==
+* This is a companion document to [[Native App Security]]
 * The first of the [[Laws of Security]] tell us that when an attacker gets to run their code on your computer, it is not longer just your computer any longer.
 * There are two parts to [[Privacy]] (the right to be let alone) that are should be subject to [[User Consent]] on a portable computer device, like a [[Smart Phone]]:

@@ Line 193: / Line 193: @@
 #[[Native App Security]]
 #[[Native App]]
 [[Category:Privacy]]

@@ Line 23: / Line 23: @@
 In spite of all the problems, the actual results are quite good as the following table shows. If a [[User]] is familiar with one service, they are likely to understand the other, at least until the Identity Server function comes into play. This table could serve as the starting point for a taxonomy of common definitions of the areas where consumer privacy could be controlled.
-Note that **  ([https://krebsonsecurity.com/2021/03/can-we-stop-pretending-sms-is-secure-now/ SMS is easy to hijack] and should not be used for security purposes.)
+Note that [https://krebsonsecurity.com/2021/03/can-we-stop-pretending-sms-is-secure-now/ SMS is easy to hijack] and should not be used for security purposes.
 {| border="1" padding="2""

@@ Line 7: / Line 7: @@
 * There are two parts to [[Privacy]] (the right to be let alone) that are should be subject to [[User Consent]] on a portable computer device, like a [[Smart Phone]]:
 ** [[User Private Information]] that we would like to be able to share only with permission. This is the [[Information Sharing]] that is regulated by the [[GDPR]] and the [[California Consumer Privacy Act of 2018]].
-** Attention, or just how annoying do we want a device in our immediate possession to be? (The regulation of this part is less clear.)
+** Attention, or just how annoying do we want a device in our immediate possession to be? (The regulation of user notifications is less clear.)
 * Android App list of [[Data Category|Data Categories]] that require [[User Consent]]. https://support.google.com/googleplay/answer/6270602?hl=en
 * Apple iPhone App Requesting Permission: https://developer.apple.com/design/human-interface-guidelines/ios/app-architecture/requesting-permission/