Why SP for Android want permission to receive SMS?

Why SP for Android want permission to receive SMS?

Postby xbonize » Fri May 23, 2014 12:20 pm

Hello,

The new update for the Android app is requesting new permissions for receive SMS.

Why does Sticky Password need this information?
xbonize
New user
 
Posts: 46
Joined: Fri Jan 27, 2012 4:13 pm

Re: Why SP for Android want permission to receive SMS?

Postby ondrej.novak » Tue May 27, 2014 12:17 pm

Hi,

could you please specify it? What kind of request do you get?

Best regards,
Ondrej Novak
Sticky Password Team

ImageImageImageImageImage
ondrej.novak
Sticky Password Guru
 
Posts: 1035
Joined: Wed Apr 29, 2009 10:39 am
Location: Czech Republic

Re: Why SP for Android want permission to receive SMS?

Postby xbonize » Tue May 27, 2014 3:14 pm

Image
xbonize
New user
 
Posts: 46
Joined: Fri Jan 27, 2012 4:13 pm

Re: Why SP for Android want permission to receive SMS?

Postby chaosxian » Tue May 27, 2014 5:47 pm

xbonize wrote:Image

In app purchases? Why?
chaosxian
Experienced user
 
Posts: 144
Joined: Wed Apr 03, 2013 6:23 pm

Re: Why SP for Android want permission to receive SMS?

Postby pavelkrcma » Wed May 28, 2014 3:02 pm

Because of Autofill support for Two-factor authentication. Sticky helps you to autofill auth code you get via SMS. For example, if you have enabled SMS auth for your bank account and you are trying to login, you can just paste the code to the appropriate field. It works for common services like Dropbox, Google, banks etc.
Pavel Krcma
pavelkrcma
Experienced user
 
Posts: 176
Joined: Tue Aug 20, 2013 12:56 pm

Re: Why SP for Android want permission to receive SMS?

Postby SamFerdinand » Tue Jun 03, 2014 4:18 pm

Sound reasonable enough, and the Sticky team already have my trust, but even though you've already proven to be a prolific and helpful user, I miss an official statement, simply because this is a major change of permissions that should not be taken lightly by anyone.
Could you please direct me to the page you've read this information you provided?

Kind regards
Sam Ferdinand

pavelkrcma wrote:Because of Autofill support for Two-factor authentication. Sticky helps you to autofill auth code you get via SMS. For example, if you have enabled SMS auth for your bank account and you are trying to login, you can just paste the code to the appropriate field. It works for common services like Dropbox, Google, banks etc.
SamFerdinand
New user
 
Posts: 20
Joined: Fri Jul 20, 2012 10:41 am
Location: UK

Re: Why SP for Android want permission to receive SMS?

Postby pavelkrcma » Wed Jun 04, 2014 6:05 pm

Hello,
we prepare a FAQ with explanation why each permission is required. It makes sense to have it on one place.
Pavel Krcma
pavelkrcma
Experienced user
 
Posts: 176
Joined: Tue Aug 20, 2013 12:56 pm

Re: Why SP for Android want permission to receive SMS?

Postby SamFerdinand » Wed Jun 04, 2014 8:33 pm

Oh, I'm sorry, didn't know you were part of the Sticky team -- I clicked on your username and it just looked like a normal user with a lot of postings in their history. Thank you for elaborating.

Kind regards
Sam
SamFerdinand
New user
 
Posts: 20
Joined: Fri Jul 20, 2012 10:41 am
Location: UK

Re: Why SP for Android want permission to receive SMS?

Postby xbonize » Tue Jun 10, 2014 2:47 am

we prepare a FAQ with explanation why each permission is required. It makes sense to have it on one place.

I suggest adding explaining how permissions work, and what each type does, complete with examples for what each permissions type means so we can understand what each permissions type means as we understand why an app is requesting it when install or update.

pavelkrcma, thank you for elaborating further.
xbonize
New user
 
Posts: 46
Joined: Fri Jan 27, 2012 4:13 pm

Re: Why SP for Android want permission to receive SMS?

Postby xbonize » Thu Jul 10, 2014 2:48 pm

Any update for this FAQ?
xbonize
New user
 
Posts: 46
Joined: Fri Jan 27, 2012 4:13 pm

Re: Why SP for Android want permission to receive SMS?

Postby ondrej.novak » Mon Jul 14, 2014 2:39 pm

Hi,

we will place the list of permissions to FAQ shortly. Please find it below:

com.android.vending.BILLING
Allows application to use in-app purchase in order to extend the service

android.permission.SYSTEM_ALERT_WINDOW
Allows an application to open windows using the type TYPE_SYSTEM_ALERT,
shown on top of all other applications. This permission is used to display
messages and notifications, i.e. floating window or synchronization status.

android.permission.GET_ACCOUNTS
Allows access to the list of accounts in the Accounts Service.

android.permission.INTERNET
Allows applications to open network sockets. It allows to communicate with
the backend and use StickyBrowser.

android.permission.ACCESS_NETWORK_STATE
Allows applications to access information about networks. StickyPassword
uses it to check if synchronization could be run.

android.permission.ACCESS_WIFI_STATE
Allows applications to access information about Wi-Fi networks. Used for
setting WiFi-only synchronization.

android.permission.READ_EXTERNAL_STORAGE
Allows an application to read from external storage. StickyPassword stores
data at the external storage.

android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to write to external storage. StickyPassword stores
data at the external storage.

com.android.browser.permission.READ_HISTORY_BOOKMARKS
Allows an application to read (but not write) the user's browsing history
and bookmarks. StickyPassword uses it in case of import from default
browser.

com.android.launcher.permission.INSTALL_SHORTCUT
Allows an application to install a shortcut in Launcher. User can create
StickyBrowser shortcut from the StickyBrowser menu.

com.android.launcher.permission.UNINSTALL_SHORTCUT
Allows an application to uninstall a shortcut in Launcher. User can remove
StickyBrowser shortcut from the StickyBrowser menu.

android.permission.GET_TASKS
Allows an application to get information about the currently or recently
running tasks.

android.permission.RECEIVE_SMS
Allows an application to monitor incoming SMS messages, to record or perform
processing on them. This permission is used for autofill engine in case of
two-factor authentication on websites.

android.permission.BIND_ACCESSIBILITY_SERVICE
Must be required by an AccessibilityService, to ensure that only the system
can bind to it. This permission is used for the autofill engine.

android.permission.RECORD_AUDIO
Allows an application to record audio. This permission is used by voice
recognition authentication mechanism.
Ondrej Novak
Sticky Password Team

ImageImageImageImageImage
ondrej.novak
Sticky Password Guru
 
Posts: 1035
Joined: Wed Apr 29, 2009 10:39 am
Location: Czech Republic


Return to Sticky Password for Android

Who is online

Users browsing this forum: No registered users and 0 guests

cron