By what set of mechanisms is it possible for the app to access data that you've denied the app access to? It seems the flaw is in Android allowing this to happen.
The example given (app accessing photo with embedded gps coords) seems very specific and doesn't deal with the general notion of data harvesting.
And wrt mac address lookups - for this reason it's not possible to list the available wifi access points on android without requiring the location permission. It's pretty absurd that "list the access points that I have recently received wifi beacons for" is equal to "locate where I am on earth", but that's the world we live in now.
Whether it's just location data or a larger set of data is unclear from the article.
The example given (app accessing photo with embedded gps coords) seems very specific and doesn't deal with the general notion of data harvesting.
And wrt mac address lookups - for this reason it's not possible to list the available wifi access points on android without requiring the location permission. It's pretty absurd that "list the access points that I have recently received wifi beacons for" is equal to "locate where I am on earth", but that's the world we live in now.
Whether it's just location data or a larger set of data is unclear from the article.