Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

You do know the reasoning behind the Least Privilege Principle, don't you?

It's not that developers are untrustworthy, it's that software have vulnerabilities, and they get exploited.



The permissions being requested are things that all native apps get by default. I’m not worried about trusted code getting permission to something I trusted a hundred other apps with previously.


Those other apps don't regularly download and execute arbitrary third-party code, though.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: