[SailfishDevel] community thoughts on app security

[Martin Kolman]

1.12.2013 13:22, artem.marchenko at gmail.com:
> A couple of points from an experienced of developing several small 
> Symbuan-Meego apps and managing development of iOS apps. Just notes of 
> somebody who likes development yet prefers thinking about the user 
> rather than superior hacker-user.
>
> 1) if we are into asking permissions, let's ask them on first attempt 
> (as iOS does), not in installation as Android does. At first use of 
> e.g. putting a photo to map there us at least a small chance user 
> could understand why GPS positioning is asked for.
Also the user should be able to grant permissions individually, not just 
all-or-nothing (like on Android) & the app needs to be able to work with 
it. That's how it is on BB10 for example.
>
> 1.1) and if user rejects, make app unable to request 2nd time. At max 
> let app direct user to system Settings for unblocking
>
> 2) Sandboxes are limiting, but matter. It is way more difficult to 
> freeze to death or misuse iPhone than Android. That probably goes 
> against Mer/Sailfish philosophy though.
Yeah, I would say properly tested applications & community feedback are 
enough and no artificial limitations are needed. :)

>
> Cheers,
> Artem.
>
>
> *From: *AL13N
> *Sent: *Sunday, December 1, 2013 01:12
> *To: *devel at lists.sailfishos.org
> *Reply To: *Sailfish OS Developers
> *Subject: *[SailfishDevel] community thoughts on app security
>
>
> plz see the thoughts of 'users' on app security (compiled from IRC #jolla)
>
> to be found here: (on section of same name)
>
> http://elinux.org/Jolla
>
> additionally, there's also stuff on jolla hardware there, and some
> thoughts on defined services on apps(system) for other apps (maybe dbus
> stuff?)
>
> i don't know if this is really something for sailfishos? or nemo or mer or
> jolla... so i'm posting it here :-)
>
> _______________________________________________
> SailfishOS.org Devel mailing list
>
>
> _______________________________________________
> SailfishOS.org Devel mailing list

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.sailfishos.org/pipermail/devel/attachments/20131201/066ec251/attachment.html>