Path: ...!feeds.phibee-telecom.net!3.eu.feeder.erje.net!feeder.erje.net!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!nnrp.usenet.blueworldhosting.com!.POSTED!not-for-mail
From: Andrew <andrew@spam.net>
Newsgroups: comp.mobile.android
Subject: Re: Android keyboard: your choice.
Date: Wed, 19 Jun 2024 03:55:33 -0000 (UTC)
Organization: BWH Usenet Archive (https://usenet.blueworldhosting.com)
Message-ID: <v4tkrl$1bpq$1@nnrp.usenet.blueworldhosting.com>
References: <20240617114559.a2970ac2923facc44a2ec355@gmail.com> <v4ov83$j5oj$1@dont-email.me> <v4sojj$1gqik$1@dont-email.me> <lde8tqF9a76U1@mid.individual.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Injection-Date: Wed, 19 Jun 2024 03:55:33 -0000 (UTC)
Injection-Info: nnrp.usenet.blueworldhosting.com;
	logging-data="44858"; mail-complaints-to="usenet@blueworldhosting.com"
Cancel-Lock: sha1:iTZUR/NeG7smipX+attojNf95bM= sha256:bgDtzgjVbjJjMtDsFSwYV25wr4aKjJiFaK5cHYjHPSc=
	sha1:j2Cn35zQ41rB20hRmXwQD5NsOrc= sha256:G0HZCZ7B55RLLw0pvCHf2ierVA7yqkhFL1QfL8TyRCk=
X-Newsreader: PiaoHong.Usenet.Client.Free:1.65
Bytes: 2434
Lines: 27

Andy Burns wrote on Tue, 18 Jun 2024 21:27:34 +0100 :

>> Any reason why it would need the READ_CONTACTS permission ?
> 
> According to a comment on an issue/question in github
> 
> "It's for adding contact names to suggestions and spell check."

Look here: <https://i.postimg.cc/rpJQj8vx/heliboard04.jpg>

1. Mine is turned off, by default, for some reason.
   android.permission.READ_CONTACTS = dangerous, revoked

2. When dealing with permissions, it's not what the "purpose" of the 
   permission is that is worrisome, it's the "capability" of it (e.g., 
   maybe *other* apps can make use of the data, e.g., Firebase).

3. This is what Muntashirakon App Manager says about the permission.
   "Allows the app to read data about your contacts stored
    on your phone. Apps will also have access to the 
    accounts on your phone that have created contacts. 
    This may include accounts created by apps you have 
    installed. This permission allows apps to save your
    contact data, and malicious apps may share contact
    data without your knowledge"

On my phone, there are no accounts. Nor are there contacts in the default
sqlite database location; but most people will have both of those, right?