![]() It's possible Google may have to take additional steps to completely shut the door on this tactic. This change will restrict the easiest path to hijacking location data, but it leaves some workarounds like calling out to camera apps directly or asking users to take photos and load them from a media provider. Harvesting EXIF data in this way has actually been documented in the past when Shutterfly was caught doing it in 2019. ![]() This change also doesn't affect intent actions that launch the user-specified default camera app, including _ACTION_STILL_IMAGE_CAMERA, _ACTION_STILL_IMAGE_CAMERA_SECURE, or _ACTION_VIDEO_CAMERA. A user can set a third party camera app as the default camera app. This change does not affect users' capability to install and use any camera app to capture images or videos directly. If you want a specific third-party camera app to handle your app's intent, you may do so by explicitly specifying the third-party camera app’s package name to fulfill the intent. To receive EXIF location metadata from the pre-installed system camera app when using intents that have one of the preceding intent actions, your app must declare ACCESS_MEDIA_LOCATION in addition to the ACCESS_COARSE_LOCATION or ACCESS_FINE_LOCATION permission. This is designed to ensure that the EXIF location metadata is correctly processed based on the location permissions defined within the app sending the intent. In a response to The Verge, Google explained that this change was made to "keep bad actors from potentially harvesting your location." This explanation was also added in an update to the list of changes in Android 11, along with more technical details and a clarification that this does not inhibit the ability to install and use third-party camera apps. Google attributes the change to potential geotag hijacking Perhaps some users were tricked into setting a malicious camera app as the default and then using it to capture things that should have remained private. Privacy and security are cited as the reason, but there's no discussion about what exactly made those intents dangerous. Google describes the change in a list of new behaviors in Android 11, and further confirmed it in the Issue Tracker. If you want your app to use a specific third-party camera app to capture images or videos on its behalf, you can make these intents explicit by setting a package name or component for the intent. If more than one pre-installed system camera app is available, the system presents a dialog for the user to select an app. Starting in Android 11, only pre-installed system camera apps can respond to the following intent actions: ExifTool for Android: View, edit or delete metadata in photo, video and other files EXIF Pro - ExifTool for Android: View, edit or delete the metadata of files on Android Multi-Platform. Android 11 will now automatically provide the pre-installed camera app to perform these actions without ever searching for other apps to fill the role. Three specific intents will cease to work like they used to, including: VIDEO_CAPTURE, IMAGE_CAPTURE, and IMAGE_CAPTURE_SECURE. Google offers three years of OS updates and up to five years of security updates, while Samsung offers four years of One UI /Android OS updates and five years of security updates.However, things are going to change with Android 11 for apps that ask for photos or videos. Among Android phones, only Google’s Pixel phones and phones in the Android One program are guaranteed prompt updates-The actual timeframe of updates varies on your phone’s manufacturer. The oldest supported devices may not support every single feature of the latest software, but they continue to get most of the functional improvements and all of the security updates for as long as the hardware will last. You get new features and apps, support for new image and video formats and security protocols, and patches for both online security threats and flaws that could allow people to get data from your phone. Fast software updates for many years: The biggest advantage iOS has over Android is its software updates: Apple generally supports new iPhones and iPads with iOS updates for five to six years after their release date, and all of those devices get the same updates at the same time.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |