{"id":26049,"date":"2020-08-04T18:36:03","date_gmt":"2020-08-04T13:06:03","guid":{"rendered":"https:\/\/www.technologyforyou.org\/?p=26049"},"modified":"2020-08-04T18:36:03","modified_gmt":"2020-08-04T13:06:03","slug":"five-permissions-android-games-do-not-need","status":"publish","type":"post","link":"https:\/\/www.technologyforyou.org\/five-permissions-android-games-do-not-need\/","title":{"rendered":"Five permissions Android games do not need"},"content":{"rendered":"<p class=\"c-article__title\"><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 14pt; color: #000080;\">You can refuse some permissions to greedy games, and they most definitely do not need these five.<\/span><\/p>\n<div class=\"c-article__intro\">\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\">By default, apps on your phone have very limited permissions. To gain access to most of your data \u2014 and potentially dangerous Android features \u2014 they need your\u00a0<a href=\"https:\/\/www.kaspersky.com\/blog\/android-8-permissions-guide\/23981\/\" target=\"_blank\" rel=\"noopener noreferrer\">explicit consent<\/a>. Android does that for security reasons; if permissions have the potential for abuse, it\u2019s better if an app doesn\u2019t have them by default.<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\">Apps actually need some permission to do their jobs. For example, AR games really do require access to the camera. But even legitimate apps often want more than they really need. Here are five permissions that bona fide games definitely don\u2019t need, and of course <a href=\"https:\/\/www.kaspersky.com\/blog\/ransomware-in-fortnite-cheats\/28104\/\" target=\"_blank\" rel=\"noopener noreferrer\">malware masquerading as a game<\/a>\u00a0would love to have.<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\">For this post, we\u2019re using the names of permissions and their paths in the \u201cclean\u201d Android 10. In other versions and on devices from some vendors, they may differ slightly.<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 14pt; color: #000080;\">Accessibility<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\"><strong>What it is.<\/strong>\u00a0Accessibility comprises a set of Android features that can help enable people, in particular people with disabilities, to use the device. Apps with Accessibility rights can see everything that happens on the screen, and control everything as if they were the user: change settings, perform actions in other apps, and so on.<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\">One example of an app that needs Accessibility permissions is a voice assistant, which uses them to execute voice commands and to read information from the phone out loud. Games do not need this feature set.<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\"><strong>What\u2019s the danger?<\/strong>\u00a0An app with Accessibility access can do almost anything on the device. For example, it can perform online banking transactions, write and read e-mails and other messages, change screen settings, and more. Generally, despite the innocuous-sounding name, this is a\u00a0very\u00a0dangerous permission.<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\"><strong>Where to check.<\/strong>\u00a0Settings \u2192 Accessibility<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 14pt; color: #000080;\">Device admin apps<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\"><strong>What it is.<\/strong>\u00a0Device admin apps involve remote control of the device. The permission might be needed if the phone is used for work, for example, and the company\u2019s system administrators require access to it. Generally apps do not need this permission \u2014 and you certainly should not grant it to games.<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\"><strong>What\u2019s the danger?<\/strong>\u00a0Armed with admin rights, apps can change the device\u2019s password, lock the screen, delete files, and so on. What\u2019s more, getting rid of a \u201cgame\u201d with admin rights won\u2019t be easy; the permission is intended for corporate admin tools that employees should not remove from the phone.<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\"><strong>Where to check.<\/strong>\u00a0Settings \u2192 Apps and notifications \u2192 Advanced \u2192 Special app access \u2192 Device admin apps<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 14pt; color: #000080;\">Install unknown apps<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\"><strong>What it is.<\/strong>\u00a0Permission to install unknown apps means having the ability to download other apps from anywhere, not only from Google Play. Games simply do not need that ability.<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\"><strong>What\u2019s the danger?<\/strong>\u00a0Even if a game isn\u2019t malicious, this permission lets it download \u201cpartner apps\u201d to your smartphone or tablet, and those can be very difficult to get rid of later. Moreover, some partner apps might slip you some genuine malware. Don\u2019t give this permission to anything, and download apps only from official sources.<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\"><strong>Where to check.<\/strong>\u00a0Settings \u2192 Apps and notifications \u2192 Advanced \u2192 Special app access \u2192 Install unknown apps<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 14pt; color: #000080;\">Display over other apps<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\"><strong>What it is.<\/strong>\u00a0Permission to display app windows on top of any running apps. Facebook Messenger uses this feature to show the chat icon even when you\u2019re using another program, for example.<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\"><strong>What\u2019s the danger?<\/strong>\u00a0This permission offers minimal benefit to the user, but it can cause significant harm. An unscrupulous game might use it to display banner ads on top of other apps. And if it turns out to be malware in disguise, it can lock the screen and demand ransom, or sneak in a fake form for entering bank card details. Or overlay a fake virtual keyboard atop the real one to read everything you type.<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\">With a clever overlay obscuring the app you think you\u2019re using, criminals can also get your consent to just about anything. In one scenario, an app requests access to, say, Accessibility permissions, and displays a window over it with an innocent message \u2014 say, that the content is temporarily inaccessible. This window covers everything except the real OK button in the request. The unsuspecting user taps it, and boom, cybercriminals have Accessibility in the bag.<\/span><\/p>\n<p><span class=\"embed-youtube\" style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\"><iframe loading=\"lazy\" id=\"773917411\" class=\"youtube-player\" src=\"https:\/\/www.youtube.com\/embed\/RYQ1i03OVpI?version=3&amp;rel=1&amp;fs=1&amp;showsearch=0&amp;showinfo=1&amp;iv_load_policy=1&amp;wmode=transparent&amp;enablejsapi=1&amp;origin=https%3A%2F%2Fwww.kaspersky.com\" width=\"640\" height=\"390\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\" data-gtm-yt-inspected-11460029_106=\"true\" data-mce-fragment=\"1\"><\/iframe><\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\"><strong>Where to check.<\/strong>\u00a0Settings \u2192 Apps and notifications \u2192 Advanced \u2192 Special app access \u2192 Display over other apps<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 14pt; color: #000080;\">SMS<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\"><strong>What it is.<\/strong>\u00a0SMS permissions give an app the ability to read and send SMS, MMS, and WAP Push messages. Games don\u2019t need it, and they can\u2019t even get it unless you\u00a0<a href=\"https:\/\/developer.android.com\/guide\/topics\/permissions\/default-handlers\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">make them your default app for handling text messages<\/a>. But malware pretending to be a game may demand it.<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\"><strong>What\u2019s the danger?<\/strong>\u00a0With access to text messages, apps can subscribe you to paid services by sending messages to short numbers. They can also spam your contacts (on your dime).<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\">Most dangerous of all is that this permission lets apps intercept text messages with one-time confirmation codes from banks, enabling attackers to log in to your personal account and steal your money.<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\"><strong>Where to check.<\/strong>\u00a0Settings \u2192 Apps and notifications \u2192 App permissions \u2192 SMS\u00a0and\u00a0Settings \u2192 Apps and notifications \u2192 Advanced \u2192 Default apps<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 14pt; color: #000080;\">Don\u2019t give games more than they need<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\">Android offers lots more permissions. Here, we\u2019ve just covered those that must never be given to games under any circumstances. But you should\u00a0<a href=\"https:\/\/www.kaspersky.com\/blog\/android-8-permissions-guide\/23981\/\" target=\"_blank\" rel=\"noopener noreferrer\">treat other permissions with care<\/a>\u00a0as well.<\/span><\/p>\n<p><span style=\"font-family: 'trebuchet ms', geneva, sans-serif; font-size: 12pt;\">When it comes to device security, you can never be too cautious. If some three-in-a-row game wants access to your camera or microphone, just say no. And if a game really does need permission to work, you can always issue it later.<\/span><\/p>\n<p><strong><span style=\"font-size: 12pt; font-family: 'trebuchet ms', geneva, sans-serif;\">By <a href=\"https:\/\/www.kaspersky.com\/blog\/author\/hughaver\/\">Hugh Aver<\/a> | Source: Kaspersky Blog<\/span><\/strong><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>You can refuse some permissions to greedy games, and they most definitely do not need these five. By default, apps on your phone have very limited permissions. To gain access to most of your data \u2014 and potentially dangerous Android features \u2014 they need your\u00a0explicit consent. Android does that for security reasons; if permissions have [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":13742,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[17,16],"tags":[],"class_list":{"0":"post-26049","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-pics-and-videos","8":"category-tech-knowledge"},"_links":{"self":[{"href":"https:\/\/www.technologyforyou.org\/wp-json\/wp\/v2\/posts\/26049","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.technologyforyou.org\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.technologyforyou.org\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.technologyforyou.org\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.technologyforyou.org\/wp-json\/wp\/v2\/comments?post=26049"}],"version-history":[{"count":0,"href":"https:\/\/www.technologyforyou.org\/wp-json\/wp\/v2\/posts\/26049\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.technologyforyou.org\/wp-json\/wp\/v2\/media\/13742"}],"wp:attachment":[{"href":"https:\/\/www.technologyforyou.org\/wp-json\/wp\/v2\/media?parent=26049"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.technologyforyou.org\/wp-json\/wp\/v2\/categories?post=26049"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.technologyforyou.org\/wp-json\/wp\/v2\/tags?post=26049"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}