X

KitKat update removes app permissions toggle

Google quietly pulls a hidden feature in Android KitKat that allowed people to deny app permissions on a case-by-case basis.

Seth Rosenblatt Former Senior Writer / News
Senior writer Seth Rosenblatt covered Google and security for CNET News, with occasional forays into tech and pop culture. Formerly a CNET Reviews senior editor for software, he has written about nearly every category of software and app available.
Seth Rosenblatt
Google

What Android 4.3 Jelly Bean giveth, Android 4.4.2 KitKat taketh away.

Google has removed the hidden feature App Ops from Android in its Android 4.4.2 KitKat update, claiming that the feature wasn't supposed to be available to the public in the first place. Google removed the feature because it was "experimental" and could break app functionality, reported the Electronic Frontier Foundation.

"The fact that [Android users] can not turn off app permissions is a Stygian hole in the Android security model, and a billion people's data is being sucked through," wrote the EFF's Peter Eckersley. "Embarrassingly, it is also one that Apple managed to fix in iOS years ago."

The EFF argued that Google ought to re-enable the feature and fix it by adding three missing pieces: a single switch to keep apps from collecting trackable identifiers such as your phone number, IMEI, and user account info; a way to disable network access on a per-app basis; and better integration of App Ops into the Android system.

Google did not respond to a request for comment. CNET will update the story when they do.