Difference between revisions of "Native App Privacy"
From MgmtWiki
(→Solutions) |
(→Solutions) |
||
Line 45: | Line 45: | ||
|Camera | |Camera | ||
|- | |- | ||
− | |Contacts|Contacts|Contacts | + | |Contacts | Contacts | Contacts |
|- | |- | ||
− | |??|??|Email | + | |?? | ?? | Email |
|- | |- | ||
− | |Health||yes?? | + | |Health | | yes?? |
|- | |- | ||
− | |Health+|| | + | |Health+ | | |
|- | |- | ||
− | |Home|| | + | |Home | | |
|- | |- | ||
− | |||File access | + | | | | File access |
|- | |- | ||
|Location|Location|Location | |Location|Location|Location | ||
Line 61: | Line 61: | ||
| | | | ||
Mic | Mic | ||
− | |||
| | | | ||
Mic | Mic | ||
− | |||
| | | | ||
Mic | Mic | ||
− | |||
|- | |- | ||
| | | | ||
Motion | Motion | ||
− | |||
| | | | ||
Body | Body | ||
− | |||
| | | | ||
− | |||
− | |||
|- | |- | ||
| | | | ||
Music | Music | ||
− | |||
| | | | ||
− | |||
− | |||
| | | | ||
− | |||
− | |||
|- | |- | ||
| | | | ||
− | |||
− | |||
| | | | ||
Phone | Phone | ||
− | |||
| | | | ||
− | |||
− | |||
|- | |- | ||
| | | | ||
Line 173: | Line 156: | ||
| | | | ||
− | |||
− | |||
| | | | ||
− | |||
− | |||
|- | |- | ||
| | | | ||
− | |||
− | |||
| | | | ||
Storage | Storage | ||
− | |||
| | | | ||
− | |||
− | |||
|- | |- | ||
| | | | ||
− | |||
− | |||
| | | | ||
− | |||
− | |||
| | | | ||
Tasks | Tasks | ||
Line 206: | Line 176: | ||
| | | | ||
− | |||
− | |||
|- | |- | ||
| | | | ||
− | |||
− | |||
| | | | ||
− | |||
− | |||
| | | | ||
Other Devs | Other Devs | ||
− | |||
|- | |- | ||
| | | | ||
− | |||
− | |||
| | | | ||
− | |||
− | |||
| | | | ||
Diagnostics | Diagnostics | ||
− | |||
|- | |- | ||
| | | | ||
safari | safari | ||
− | |||
| | | | ||
chrome | chrome | ||
− | |||
| | | | ||
File D/L | File D/L | ||
− | |||
|- | |- | ||
| colspan="2" | | | colspan="2" | | ||
non-persist | non-persist | ||
− | |||
| | | | ||
− | |||
− | |||
|- | |- | ||
| | | | ||
DNT | DNT | ||
− | |||
| | | | ||
− | |||
− | |||
| | | | ||
File access | File access | ||
− | |||
|} | |} | ||
==References== | ==References== | ||
===Other References=== | ===Other References=== |
Revision as of 19:47, 7 August 2018
Full Title and Meme
An application that is installed on a user's computing device can be given access to some parts of user Privacy.
Context
- The first of the Laws of Security tell us that when an attacker gets to run their code on your computer, it is not longer just your computer any longer.
- There are two parts to Privacy (the right to be let alone) that are should be subject to User Consent on a portable computer device, like a smart phone:
- Attention, or just how annoying do we want a device in our immediate possession to be?
- User Private Information that we would like to be able to share only with permission.
- Android App list of Data Categories that require User Consent. https://support.google.com/googleplay/answer/6270602?hl=en
- Apple iPhone App Requesting Permission: https://developer.apple.com/design/human-interface-guidelines/ios/app-architecture/requesting-permission/
- Apple iPhone app Requesting Authorization to use System Features: https://developer.apple.com/documentation/uikit/core_app/protecting_the_user_s_privacy
- Apple CKContainer manages all attempts to access user data on the device or in iCloud. https://developer.apple.com/documentation/cloudkit/ckcontainer
- Windows (UWP) settings are on all Windows 10 computer, but do not seem to be shown anywhere on the web. Just navigate start -> settings -> privacy -> app settings.
Problems
Solutions
iPhone | Android | Windows |
yes?? |
yes?? |
Accnt Info |
Bluetooth |
Radios | |
always | always | Background |
Calendar | Calendar | Calendar |
Camera | Camera | Camera |
Contacts | Contacts | ||
| yes?? | ||
| | ||
| | ||
| File access | ||
Location|Location | ||
Mic |
Mic |
Mic |
Motion |
Body |
|
Music |
||
Phone |
||
|
|
Call History |
yes?? |
yes?? |
Notification |
Photos |
|
|
Purchases |
Purchases |
Purchases |
Reminders |
|
|
Siri |
|
|
|
SMS |
Messaging |
Speech |
||
Storage |
||
Tasks | ||
TV |
|
|
Other Devs | ||
Diagnostics | ||
safari |
chrome |
File D/L |
non-persist |
||
DNT |
File access |