Paper

Silent Consent, Persistent Risk: Android Permission Groups and Custom Permissions

Unreadunread

AI summary

arXiv:2605. 27667v1 Announce Type: new Abstract: Android's permission system is designed to balance usability with informed consent, yet two legacy mechanisms still undermine that balance in Android 16: (i) permission groups that silently auto-grant new permissions within a group after a user's initial approval, and (ii) normal-level custom permissions that are auto-granted at install and enable cross-app access with no user visibility.

Reading status

Priority

About this paper

Authors: Olawale Amos Akanji, Manuel Egele, Gianluca Stringhini
Released: 2026-05-28 (1mo ago)
Topic: Related to current project
Relation to my work: Read next because Silent Consent, Persistent Risk: Android Permission Groups and Custom Permissions overlaps with clean result "Language-mismatch LoRA SFT on Qwen2.5-7B leaks the trained completion language into bystander directives the model was never trained on, absent under same-language SFT (LOW confidence)", clean result "Only continuous soft prefixes hit both EM axes at once on Qwen-2.5-7B-Instruct: discrete prompt searches split between the alignment objective and the distributional objective, and both discretizations of the soft prefix collapse (MODERATE confidence)", clean result "The marker is a representational handle, not a behavioural one — sharing it between a villain persona and the assistant transfers no misalignment (HIGH confidence)". Matching terms: under, soft, rate, without, test. Source: arxiv cs.CR (Cryptography and Security).
arXiv: 2605.27667

Ask Claude about this paper

Posts a comment with @claude so the runner spins up a Claude Code session scoped to Silent Consent, Persistent Risk: Android Permission Groups and Custom Permissions. Replies appear in the conversation below.

Comments

No comments yet.

Related records

No links yet.