Hacker News Reader

I thought you have to explicitly allow applications to access any data outside their own directory?

You need permission to access any user data (SMS, calendar, etc).

It is almost impossible to get data from another app if the author doesn't expose it somehow (place it on SD Card, expose Content Providers).

>>Finally, 3% of all of the Market submissions that have been analyzed could allow an application to send unknown premium SMS messages without the user's interaction or authorization.<<

Could an independent Android developer comment on whether this is in fact true?

I'm not privy to any statistics on the matter, but simply as an Android user I can tell you that Android applications can't dial numbers, send SMS, etc., unless you explicitly grant them permission to do so -- and Android will tell you, plain as day, that the application wants privilege to access "Services that can cost you money".

Reply on news.ycombinator.com