PSA: Android's Permissions May Allow Devs to Silently Add Privileges

Google recently made a change to the way it handles permissions on the Play Store.

Related permissions are grouped together when you update.

This makes it simpler to see what does what, but it has some potentially worrisome implications.

This doesn’t necessarily make everything a free-for-all.

As stated, a permission has to be in an already-approved group for be added.

However, there doesn’t seem to be much in the way of risk prioritization.

Simplified Permissions UI In The Play Store Could Allow Malicious Developers To Silently Add Permissions| Android Police