topic Re: Re: How Android File Management should be.... in Tech Talk

How Android File Management should be....

TheMystic — Tue, 07 Jun 2022 06:27:38 GMT

File Management or Storage Access on Android is a severely flawed design, even after the recent implemention of SAF (Storage Access Framework) with Android 11.

Scoped storage introduced in Android 11 is good, but Restricted Storage would be an even better option.

On Android, at the moment, apps that have access to internal storage for their own files, also have access to every other file in the system. This is definitely a privacy risk, and also a security concern. With the introduction of Scoped Storage, some of that is being addressed. Yet, there is still huge scope for misuse if apps have malicious intent.

Ideally, all apps must only have access to their own files - those created by the app and those downloaded by the user using that app. For access to any other file, every app must go through the built-in file manager to prevent misuse. What that means is no app has permanent access to files that are not created by them, and can only access external files each time with explicit user consent and interaction. This would completely address the privacy concerns with regards to user files.

This is how the Files app in iOS is designed and is an extremely well thought out one. Let me illustrate with an example:

We all know how Facebook is notorious when it comes to privacy. Let's assume you have a Facebook account and the Facebook app is installed on your phone. If you want to share a picture on Facebook, you have to grant the app access to your internal storage. On Android, this effectively grants Facebook access to every file on your storage. Given its reputation, it won't be surprising if Facebook app scans all your pictures/ videos for its AI/ ML, or even uploads them without your knowledge.

On iOS, the permission screen looks like this:

You have the choice of either granting permanent access (Option 1), or limit the access to just the file you want (Option 2).

On Android, it is essentially Option 1 alone. You have to grant access to the entire file system for you to be able to upload your pics to Facebook.

On iOS, you have the choice of uploading just the pic you want, without giving the app access to any other file in your internal storage. This is a huge privacy boon.

In this case, Facebook app has to make a request to the built in file manager (which obviously has access to every file in the system), and you browse your media library using the built-in file manager (with which the built-in Photos app is integrated) to grant access. Facebook app sees nothing else, and you are still able to upload the file you want!

Same holds true for every app. An app should only have permanent access to its own files, and not any other file. For access to any other file, the app has to go through the built-in file manager route and access only the file that the user wants it to see.

That said, it would be great to have the ability to configure the privacy setting for each folder on internal storage. We can either set it to "Restricted" or "Unrestricted".

Folders which are assigned the "Unrestricted" parameter setting, their contents are accessible to all apps (like it is now).

Folders which are assigned the "Restricted" parameter setting, their contents can only be accessed via the built-in file manager route as explained in the example above. This should be the default setting for every folder in the system.

Hope Google and Android OEMs can design something like this keeping in mind the privacy needs of its users, and the abusive intents of large corporations and malicious actors.

Re: How Android File Management should be....

VedantKalore — Mon, 04 Apr 2022 13:32:33 GMT

Man use iPhone better let us Android user enjoy freedom, heaven and not a jail!

Re: Re: How Android File Management should be....

TheMystic — Mon, 04 Apr 2022 13:41:20 GMT

You have the choice of type of permission you grant there. This is actually a good thing because YOU get to decide what an app can see or not see.

Nothing wrong in learning from competition. They are copying all sorts of rubbish. Might as well copy the good things too.

That said, there are plenty of good apps on the App Store that provide a lot of flexibility. One must find them and learn to use them.

Re: How Android File Management should be....

GalaxyTechie — Mon, 04 Apr 2022 13:42:34 GMT

Android 13 improves file management of photos after reading this documentation I think: https://developer.android.com/about/versions/13/features/photopicker

Re: Re: Re: How Android File Management should be....

VedantKalore — Mon, 04 Apr 2022 13:45:56 GMT

I hate iOS with all my heart , It has restrictions on every place 😒 cant even use stuff of our choice 😔! App store ask a developer hoe difficult it's to make ios app an how easy an android app , the only difficulty on android is variety of screens from watch to smartphone to tablet to TV to foldable! Apple is sort of sandbox stuff

Re: Re: How Android File Management should be....

TheMystic — Mon, 04 Apr 2022 13:47:57 GMT

That's good to know. They must just extend that concept to keep every application completely sandboxed and allow nothing without explicit user interaction.

Re: Re: Re: How Android File Management should be....

GalaxyTechie — Mon, 04 Apr 2022 13:49:17 GMT

Fingers crossed

Re: Re: Re: Re: How Android File Management should be....

TheMystic — Mon, 04 Apr 2022 13:50:48 GMT

Apps made for iOS are often better optimised (for obvious reasons) than those for Android, made by the same developer. So despite the restrictions, the end product works better.

That said, I'm talking from a user perspective. The storage access design on Android, in its current form, leaves a lot to be desired. Very insecure and completely invasive from a privacy perspective.

Re: Re: Re: Re: Re: How Android File Management should be....

VedantKalore — Mon, 04 Apr 2022 13:54:50 GMT

Then use iPhone don't distrub us #AndroidGuys😂😂😂🤣🤣🤣

Re: Re: Re: Re: Re: Re: How Android File Management should be....

TheMystic — Mon, 04 Apr 2022 13:59:23 GMT

Doing that too. Gives a better perspective with first hand experience. #NoFanboyism 🤩🤩🤩

Re: Re: Re: Re: Re: Re: Re: How Android File Management should be....

VedantKalore — Mon, 04 Apr 2022 14:03:15 GMT

I'm happy with Android, the haven restrictions free ! I'm not fan boy but saying from experience

Re: Re: Re: How Android File Management should be....

AlenSony소니알렌 — Mon, 04 Apr 2022 14:04:45 GMT

Your data won't get to the wrong hands -SamsungKnox

Re: Re: Re: Re: Re: Re: Re: Re: How Android File Management should be....

TheMystic — Mon, 04 Apr 2022 14:06:50 GMT

Same here buddy (as a user, not as a developer). I was initially shocked when i got my first iPhone more than 5 years back, but as I learnt using it, I found things are way better than what they are made out to be in the Android world.

Re: Re: Re: Re: Re: How Android File Management should be....

AlenSony소니알렌 — Mon, 04 Apr 2022 14:07:05 GMT

Because publishing on app store is more 🤑🤑🤑
And their policy's

Re: Re: Re: Re: How Android File Management should be....

TheMystic — Mon, 04 Apr 2022 14:09:50 GMT

Using the example from OP, can you tell me how Knox will prevent Facebook from seeing (and scanning for their AI/ ML) my photos and videos other than the ones I choose to upload?

Re: Re: Re: Re: Re: Re: How Android File Management should be....

VedantKalore — Mon, 04 Apr 2022 14:10:39 GMT

Play store requires $25 one time payment
Apple App store is
$99/mo for personal developers
$199/mo for enterprise

Re: Re: Re: Re: Re: How Android File Management should be....

VedantKalore — Mon, 04 Apr 2022 14:11:59 GMT

Facebook is actually telling you a piece of (can't use word) on name of privacy 🙄

Re: Re: Re: Re: Re: How Android File Management should be....

AlenSony소니알렌 — Mon, 04 Apr 2022 14:14:20 GMT

Knox only allow media files to acess it won't allow apps like fb to access other documents, and when you select to share pictures at that time only at that second fb get file system access after yoi done selecting then sending after that process knox will cut off the file access for
Fb

Re: Re: Re: Re: Re: Re: How Android File Management should be....

TheMystic — Mon, 04 Apr 2022 14:23:48 GMT

I haven't read anything in support of what you are saying. Can you link some articles on this subject?

As far as I know, Knox is a hardware (and software) based SECURITY tool. It doesn't take care of the privacy issue raised in the OP.

Would be happy if you prove me wrong.