I just thought of a potential limitation of #Android's new QUERY_ALL_PACKAGES permission that might make it almost pointless: apps can create an Intent and query for which apps respond to that Intent.
It seems like with a small set of Intents, you could effectively query for the vast majority of the apps. Can anyone confirm this?
If so, it seems like they've created the INTERNET permission again, as in a permission that only restricts good actors, and bad actors can easily circumvent it.
Yeah, because of the way apps are able to communicate QUERY_ALL_PACKAGES doesn't really achieve anything and stopping apps being able to work out what other apps are installed would be difficult
As you may not be surprised to hear Micay called it some time back
It looks like there is a lot of wiggle room in these exceptions: https://developer.android.com/training/package-visibility/automatic