WeChat. Fuck.

For class, I needed to have WeChat (pname:com.tencent.mm) installed on my device. The app is from Tencent, a Mainland China based company. Because of data mining, monitoring, and the PRC governement generally acting like BB, naturally, I’m weary.

After reluctantly installing the app, I turned on CyanogenMod’s Privacy Guard against the app (look at all those permissions it’s asking for!) Attempting to log in with a QQ ID resulted in failure (is this decrepated now?), and leading me to disable Privacy Guard to see if it was the culprit.

Bad move.

I leave Privacy Guard off for a second and it managed to get its hands on my address book and messages (or its hashes), uploading it to their servers and matching me with people I know. All this without my knowledge nor consent. The worse part is it even tries to access my address book even before asking permission.

What kind of fuckery is that?
Edit: Suddenly remembered that maybe it hasn’t had its hands on my address book and messages yet, but has uploaded my number (or its hash) to their servers to match against other people’s address books. Standard practice, I know, but can’t I be notified of that behavior also?

One more thing: great, another app to suck the remaining non-existent RAM from my device.
Forgot to mention: THIS APP HAS NO SUPPORT FOR HORIZONTAL LAYOUTS (or maybe it’s just because I turned on Privacy Guard on it again).
Edit: okay, my bad. Looks like there’s an option to enable it.

/rant

All this reminds me of a great song by Eurythmics.

WeChat permissions

(as of 2014-07-01)

This app has access to:
In-app purchases

Device & app history

retrieve running apps

Identity

find accounts on the device
add or remove accounts
read your own contact card

Contacts/Calendar

read your contacts
modify your contacts

Location

approximate location (network-based)
precise location (GPS and network-based)

SMS

read your text messages (SMS or MMS)

Photos/Media/Files

test access to protected storage
modify or delete the contents of your USB storage

Camera/Microphone

take pictures and videos
record audio

Wi-Fi connection information

view Wi-Fi connections

Device ID & call information

read phone status and identity

Other

read Home settings and shortcuts
create accounts and set passwords
run at startup
send sticky broadcast
view network connections
prevent device from sleeping
install shortcuts
use accounts on the device
change your audio settings
uninstall shortcuts
toggle sync on and off
draw over other apps
pair with Bluetooth devices
full network access
modify system settings
connect and disconnect from Wi-Fi
read sync settings
control vibration
access Bluetooth settings
Advertisements

3 thoughts on “WeChat. Fuck.”

Carefully twist your words.

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s