The permission model is broken. I should not give permission at install-time, it should be asked at runtime, at OS-level, and I MUST be allowed to say no anytime .. if I trust the app enough, then I should be able to say "allow the app to do that thing for this hour/day/month/always"
why mobile OS authors haven't learn anything from the web security model yet?
why mobile OS authors haven't learn anything from the web security model yet?