Product Reviews
Take Action
Back
SIGN THE PETITION

Fight for Fair Finance

Tell the administration and Congress to stand up for the consumer watchdog that protects you from financial fraud and abuse.
Take Action
Why Do We Have Campaigns?
We're fighting to ensure you and your family can get a fair deal in the marketplace, especially on the choices that matter most: health care, privacy, automobiles, food, finances and more. Join our campaigns and together, we'll hold corporations and lawmakers accountable.

Def Con 19: Android apps ask for too much power

Consumer Reports News: August 08, 2011 08:56 AM

Find Ratings

Ever wonder whether that app you're installing on your Android phone really needs the right to access your contacts, accounts, location, text messages, and phone calls?

In fact, Def Con attendees learned on Sunday, Android apps are often "overprivileged"—meaning they ask for more privileges during installation than they actually need to do their job.

Security experts Yekaterina Tsipenyuk O'Neil and Erika Chin reported that when they studied dozens hundreds of Android apps, they found that 31 percent of them were overprivileged. [corrected 8/11--Ed.]

With such a small sample of apps, that percentage can't be directly projected to the entire market of Android apps. But it does suggest that more than a few apps ask for a foot when all they need is an inch.

What's wrong with giving an app more power than it needs? For one, it may allow the app (or advertisers) to gather unnecessary personal information about you. And should a hacker or malicious software get access to your phone, it may let them do more damage than they otherwise could.

So the next time an Android app you're installing asks for a laundry list of privileges, consider whether it really it needs them all to perform its essential function. If not, don't install it.

RELATED:
Android malware now twice as common than six month ago
Tips: How to keep your mobile phone data out of thieves' hands

Defcon-android-1.jpg
This slide from O'Neil and Chin's demo shows the ways in which Android apps can be vulnerable.

Jeffrey Fox

Find Ratings

Computers Ratings

View and compare all Computers ratings.

E-mail Newsletters

FREE e-mail Newsletters! Choose from cars, safety, health, and more!
Already signed-up?
Manage your newsletters here too.

Electronics News

Cars

Cars Build & Buy Car Buying Service
Save thousands off MSRP with upfront dealer pricing information and a transparent car buying experience.

See your savings

Mobile

Mobile Get Ratings on the go and compare
while you shop

Learn more