Once you give it access to all photos, there's nothing stopping ... • Aaron Parecki

Aaron Parecki https://aaronparecki.com/ • Nov 23
wow, Hive Social won't let you add any photos unless you grant it access to *all* your photos. Normally on iOS you can choose to give an app access to only select photos, but it recognizes this and prevents you from doing anything. Super sketchy, will not be using this.

Once you give it access to all photos, there's nothing stopping it from combing through your camera roll and doing whatever it wants, like scanning your photos for location data, uploading hashes of the images for later matching, or probably worse things I can't think of.

Portland, Oregon, USA • 46°F

Wed, Nov 23, 2022 5:47pm -08:00

14 likes 2 reposts 5 replies
Have you written a response to this? Let me know the URL:
- Macer mastodon.scientiam.org/users/macer
  
  @aaronpk
  
  Wed, Nov 23, 2022 6:19pm -08:00
- Aaron Parecki twitter.com/aaronpk
  
  It's really frustrating that apps get these basic things so wrong. If these are the mistakes they're making that are this visible, what other much less visible mistakes are they also making?? It's not a good sign.
  
  Thu, Nov 24, 2022 2:04am +00:00 (via brid.gy)
- Aaron Parecki aaronparecki.com
  
  Also can we maybe *not* just hop from one silo to another that could just as easily be purchased and dismantled?
  
  We've got 20 years of documentation of this, and I'm just tired of it. https://indieweb.org/site-deaths
  
  Wed, Nov 23, 2022 5:59pm -08:00
- Katherine M. Moss indieweb.social/users/cambridgeport90
  
  @aaronpk That's interesting... I have always picked all whenever that prompt shows up fearing that if not, then the application won't work, or will work,but severely limited functionality.
  
  Wed, Nov 23, 2022 5:59pm -08:00
- Vittorio twitter.com/vibronet
  
  Looks like their security might not be as well thought as it might be, see also @rmondello’s thread about their u/p implementation
  
  Thu, Nov 24, 2022 1:58am +00:00 (via brid.gy)

Posted in /replies using quill.p3k.io