A social media photo-editing mobile app requests multiple permissions during installation. The app claims these are needed for photo sharing, tagging, and “smart enhancements”. If the app becomes malicious or is compromised, which permission introduces the most dangerous and realistic security attack surface?

Question

A social media photo-editing mobile app requests multiple permissions during installation. The app claims these are needed for photo sharing, tagging, and “smart enhancements”. If the app becomes malicious or is compromised, which permission introduces the   most dangerous and realistic security attack surface?

Answer

READ_EXTERNAL_STORAGE – for importing images

Answer

WAKE_LOCK – for background processing

Answer

SYSTEM_ALERT_WINDOW – for displaying in-app pop-ups

Answer

ACCESS_FINE_LOCATION – for adding geotags to photos

Answer

CAMERA – for taking pictures

Answer

INTERNET – for uploading edited photos

Answer

READ_CONTACTS – for suggesting people to tag

Answer

RECORD_AUDIO – for voice-activated captions

Answer

BLUETOOTH – for connecting to nearby printers

Answer

VIBRATE – for notification alerts

Crowdly

A social media photo-editing mobile app requests multiple permissions during ins...

Want instant access to all verified answers on moodle.bcu.ac.uk?