Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove SMS support (thanks to Google!) #364

Closed
n8fr8 opened this issue Feb 6, 2019 · 15 comments
Closed

Remove SMS support (thanks to Google!) #364

n8fr8 opened this issue Feb 6, 2019 · 15 comments

Comments

@n8fr8
Copy link
Member

n8fr8 commented Feb 6, 2019

Due to changes in policy, we can no longer send SMS messages directly from Haven. We need to remove this functionality.

https://play.google.com/about/privacy-security-deception/permissions/
https://proandroiddev.com/no-more-sms-call-log-permissions-now-what-9b8226de7827

We can still send Signal messages, and be remotely access via Tor/Onion.

@n8fr8 n8fr8 added this to the Current Sprint milestone Feb 6, 2019
@archie94
Copy link
Collaborator

archie94 commented Feb 7, 2019

Looking into this.

@E3V3A
Copy link

E3V3A commented Feb 9, 2019

You need to request special permissions to send/receive SMS. Perhaps as a "seucrity" app?

@archie94
Copy link
Collaborator

You need to request special permissions to send/receive SMS. Perhaps as a "seucrity" app?

This can be an option. Meanwhile preparing #369 just in case we do not qualify for the exception.

@lukeswitz
Copy link
Collaborator

Thoughts on submitting a permissions request form? Link takes you to Play Store portal for filing. Being open source and an alert based application should check all their boxes.

@n8fr8
Copy link
Member Author

n8fr8 commented Feb 11, 2019

I submitted the time extension, and we received that. I then submitted the request for exception, and we were denied. It really doesn't make sense, since Haven could be set as the default SMS app on the device (since it is meant to be a second device).

I am going to see what I can do through our Google contacts, but honestly, I would rather focus on making the secure notification channels more easy to use, robust, etc. Working on both the Tor and a new Matrix.org integration option.

@n8fr8
Copy link
Member Author

n8fr8 commented Feb 11, 2019

"
#5: Is your app’s use of Call Log or SMS permissions to provide functionality required by law or regulation?
No

We reviewed your request and found that your app, Haven: Keep Watch (BETA), org.havenapp.main, does not qualify for use of the requested permissions for the following reasons:

The declared functionality {Default SMS} is determined to be unnecessary or not aligned with the core functionality of your app."

@n8fr8
Copy link
Member Author

n8fr8 commented Feb 11, 2019

I realized I did request "Default SMS" since I thought we had to set the app to be the main SMS app in order to be allowed. However, we could try to request exception again with just SEND_SMS permission, since it is all that we use in fact. It is really confusing. Maybe I will try submitting the current build as a BETA and see what happens.

@lukeswitz
Copy link
Collaborator

That’s worth a shot. Maintains the feature and lets you pull it when the other side is done.

Half those I introduce to the app outside the tech bubble don’t have working knowledge of Signal. After an explanation they love it; much the way Haven is an introduction to Signal & encryption for some.

May you be victorious!

@n8fr8
Copy link
Member Author

n8fr8 commented Feb 11, 2019

Okay, posted a signed build here: https://github.com/guardianproject/haven/releases/tag/0.2.0-beta-3
and submitted as beta to Google Play.

Otherwise, @archie94 appreciate your work on this, as we may still need it! I was also thinking about supporting plugins for Haven, so we could implement, Signal, Matrix, Tor, SMS, Telegram, etc all as external APKs, you could install depending upon what kind of system you wanted to use. This would allow us to distribute the SMS feature through F-Droid for instance.

@n8fr8 n8fr8 modified the milestones: Current Sprint, Next Sprint Feb 11, 2019
@n8fr8
Copy link
Member Author

n8fr8 commented Feb 12, 2019

Ugh. Even with the reduced request for SEND_SMS only, we were denied.

"Thanks for contacting the Google Play team about your app Haven: Keep Watch (BETA), org.havenapp.main. We reviewed your app and found that it does not qualify for use of the requested permissions.

The declared functionality DEVICE_AUTOMATION is determined to be unnecessary or not aligned with the core functionality of your app."

I am going to escalate to Google contacts.

@paxperscientiam
Copy link

I've tried setting the remote notification number (SMS) to my Google voice number, but it didn't work. Is it related to this policy change?

@E3V3A
Copy link

E3V3A commented Feb 13, 2019

I can confirm that the Gapps special permission application form is totally out-of-line confusing and intentionally (?) unclear. If someone has some google inside access, please try to clarify HTF you are supposed to understand these applications, if at all. Perhaps all applications just go to /dev/null and the auto replying bot doesn't GAF to what you say you need. I asked them to clarify what some of the language meant, and got the canned response that my app would be extended another month until permissions fixed. Total 💩

I've also tried to apply for very similar permission for a number of apps, but without success. 👎

@n8fr8
Copy link
Member Author

n8fr8 commented Feb 28, 2019

We've removed SMS support from the main app. Exploring having a plugin or flavor build for users that really need it.

@n8fr8 n8fr8 closed this as completed Feb 28, 2019
@DI555
Copy link

DI555 commented May 12, 2019

@n8fr8 , please do not drop good features like sms support and others !
Would suggest a special vanilla build placed here on github , and developing all possible good amazing features in this build!!!
But gp build will be with cut-off these functions... . Imo should be independing from what's there bigG thinking! ....;)

@E3V3A
Copy link

E3V3A commented May 13, 2019

Yes, although on the one hand I'm constantly lecturing for not using SMS out of security concerns, but on the other hand, and in this case, it serves a very useful and basic function and at the end of the day, the fucking phones belong to us and not to Googles marketing team.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

6 participants