Hacker News Reader

The app can post your data to anywhere it has access to. This is commonly known as data exfiltration. The common way to prevent that is to run the app in a secure sandbox. Most OS don't provide such capability in a usable way.

View on HN

Android has capability control tied to certain kinds of specific objects such as intents and binder connections. This could be extended to streams and providers (like the one used to read email) and objects created from such streams. Would require some internal API change and to document the change in permissions.

The new permission would mean the app is allowed to send contacts or emails read from database over the network.

How do you run an email app in a secure sandbox to prevent data exfiltration? The app's primary purpose is to send and receive data.

Reply on news.ycombinator.com