Request for Opinion: INTERNET permission

[anMoney Developer]

Seems like every cool feature/API requires the adding of the dreaded Internet permission to anMoney.

What is your opinion on this?  Would you feel uncomfortable with your financial data if I did this?

Thanks for your feedback,

Tom

[our.mara...@gmail.com]

Hi Tom,

I think with any permissions it depends on the stated/outlined uses of each permission. Of course some people will like it and others will not. Personally, the ability to easily sync across devices would be fabulous, which I believe would require internet permissions; and while I and some others use workarounds to achieve such functionality those workarounds are not ideal to the masses. So IMO internet permission would be a welcome addition to amMoney, so long as the purpose is clear.

Thanks.
Jason

[Zoni]

Eu acho que a conexão com a internet seria algo muito útil pois algumas funcionalidades são realmente muito necessárias. Gostaria, no entanto, que o sistema continuasse funcionando, mesmo que não houvesse acesso regular à internet, apenas as funcionalidades que dependessem da internet estariam indisponíveis. Outro ponto seria, deixar nas opções de configuração a alternativa de habilitar ou não tais funcionalidades, assim, os que não se sentissem seguros poderiam simplesmente desabilitar o acesso e continuar usando o aplicativo. 

Entre as funcionalidades mais esperadas, acredito que a sincronização entre dois aparelhos é a mais desejada.

Abraços,

Zoni

[RickJ]

I don't see Internet permission as a security risk per-se. It doesn't for example automatically open up the app to outside attack. The risk with installing an unknown app with Internet access is if it turns out to be a rogue that exports your data without your knowledge. I think Tom has proved his credentials with anMoney, so I have no worries on that score!

Personally I have no problem using the cloud, e.g. I backup all important data to Dropbox using Dropsync, this includes my automatic anMoney backups (Dropsync is an excellent app, there's really little need to incorporate Dropbox into an app if it's only for saving backup copies - Dropsync can do it).

In this respect (going off at a tangent slightly), a feature I would like to see is encryption of backups keyed by a user-chosen password. Regardless of whether anMoney itself has Internet access, if backup files are obtained by a 3rd party they can easily be loaded up and reveal confidential information.

So yes, I'd like to see anMoney incorporate online features - e.g. live currency exchange rates is one - and I'm quite happy for it to be given Internet access.

Rick

[our.mara...@gmail.com]

The optional requirement of a key file to be present for books/backups whether in conjuction with encrypted/password protected backups would be great.  KeePass is a nice open source program that uses such features.

 

Back on the topic of internet permissions...a web based entry form would be nice for entering transactions.  I have no idea how easy/realistic this would be, however, particularly when making online purchases it is much easier to enter (or copy paste) data from the PC.

 

Jason

[Thor K.H.]

Personally I would love to have some sort of interface online where I could edit the transactions in a very simplified, yet somewhat capable way.

At the same time, I've been thinking about getting around to seeing how the anMoney database is stored. SQLlite? Similar?

It'd be nice to make an online editor for this, which could then be incorporated in some way. Ideally though, the database should be encrypted with public/private keys - or transmitted over a secure line. Plaintext transmissions shouldn't even be an option.

[grayme]

I'd be happy with anMoney having the internet permission, more so if it was to sync between devices! :o)

[Bill Falls]

I'm OK with Internet permissions. I'd hope for adequate safeguards such as requiring the user to initiate or approve any data export or import from/to anMoney after logging on. This would be especially important for prospective new anMoney users deciding whether it's safe to install and use the app - they don't know Tom as we do!

[Andi Northrop]

Yep, I'm also fine with the app having internet permissions, especially if it was to enable some simple multiple device syncing :)

[Trupod]

I have some other applications that publish separate packages for each permission.  The "Internet Add-on Package", the "Location Add-on Package", and so on.

Each package adds one or more features to the main app. 

This seems like a sensible approach, because it frees you to be as aggressive as possible with no downside.  You don't have to guess where to draw the line. 

In fact, the users' behavior will tell you ex post facto which permissions were worth the features they enable and which were not.

[anMoney Developer]

@Trupod:  Unfortunately. that's not an option for anMoney.  That can only be done if you set up a sharing of data between apps.  That's easy to do, but, by a brilliant design decision by Google, it cannot be done retroactively for an existing app.  

[guilherme hoffmann]

And how about creating a new app desinged to do just that? Sincing anmoney between devices?

[José Luis Carballal M.]

Personally I wouldn't have any problem with this permission for things like syncing with dropbox or with other devices, but as others have stated it should be very clear why the permission is needed, what kind of information would be transmitted and how is that information protected (encription) given the sensitive nature of the information, this would ease the minds of most users when they are requested for this added permission.

[anMoney Developer]

@Jose: That's the problem -- it's just a blanket permission.  A developer has no option to explain the usage of the permission.  It is available in the app description, but the vast majority of users don't read that.

[Shaun Harris]

Hi how about sending automatic emails of database to the other devices.

When opened up the data is imported though its the imported/exported flags that would need to be dealt with , how about a synchronized instead. Would this work better for people .. also have setting to give time delays between each one.

Shaun

[Shaun Harris]

Though I also have no problem with syncing over Google Drive. Or Dropbox. Even with encryption could you have just showing account one, two etc and app allocates to correct bank accounts.

Just some thoughts.

Sorry but I not a accountant though used to be programmer many many years ago.

Shaun

[RickJ]

Services like Drive and Dropbox are great for data backup, but NOT for automatic syncing between multiple copies of an application running concurrently on different devices. Getting true sync to work reliably is extremely difficult - e.g. what happens if both devices are being used at the same time and changes have been made in both between syncs? There's all kinds of gotchas that can mean sync will appear to work fine, then suddenly you loose data or get some other corruption.

The only people who ever got this right IMO were Palm (RIP), and that's because they created a data structure specifically designed for record-by-record syncing, and all apps that stored data used this built-in database. Even better, there was one sync operation that synced all data for all apps in one go. Shame they lost the plot with the move to touch screens :-(  Not everything is progress!

With the current state of technology, there's only two workable options as I see it: either the "data lives in the cloud" model, with optional offline caching (e.g. Google apps), or export and import of changes via a cloud storage provider, which must be initiated manually so you know what's happening (and so it's your fault if you mess it up!).

Anyway, you don't need Dropbox built-in because you can use Dropsync to keep anMoney's automatic backups copied to the cloud. I personally think Internet access would be more useful for things like currency updates.

My .02 ...

Rick

[Shaun Harris]

Google drive can be used In AnMoney by using Google's function already in place I believe.
http://support.google.com/drive/bin/answer.py?hl=en&answer=2440137

[anMoney Developer]

Hi, every service supports file level access.  What Rick is talking about is record level access, which currently none of them have an API for.

[Ricardo Cardoso]

Weird coincidence! I just rated the app (5 stars, awesome work) and commented that I would like some desktop integration. It would be fantastic to get some backups out of the mobile and possibly input and change data directly from a PC.

I understand that the second part is a LOT of work and I can't really say I'm not already happy and satisfied with what you've done so far.

I'll be checking this forum every now and then. I honestly want to invest some time in you guy(s)/gal(s) and hopefully help a bit (or maybe a byte, who knows?!).
;)

Ricardo

[TerBear]

I appreciate your careful consideration of this feature.

I'm not very knowledgeable about web security issues, although I do as much online as I'm able, always relying that using the most secure method will protect me (perhaps I should be more curious/careful!)

I am comfortable that any decision you make will thoroughly vetted, as I trust you, having been a customer for several years. However I understand your desire to attract new customers that don't have similar track records with you.

With that said, I WOULD more than likely use this feature, especially if there was the ability to share data with my husband. Which would result in at least 1 additional sale, btw.

Terri Hine

[Nick Emblow]

Just have two versions of the app - one with and one without. Job done.

[anMoney Developer]

I don't want to do that.  I lose all ratings and reviews if I do that.  And you won't be able to go from one to the other without paying again.

[Shaun]

Hi

Surely having a app Major feature that you do not want to use in current app would regain the ratings of a new app as people are going elsewhere as they need the cloud function

You have a brilliant app but it is being strangled in the market place with no function of cloud sync and desktop version,

Shaun

[anMoney Developer]

I agree with the lack of Cloud Backup.  But as you know, there are way around it right now.

As far as a Desktop -- there will never be a traditional Windows desktop.  If anything, maybe a Chrome packaged app.

[Andi Northrop]

Off topic, but I would love a Chrome app (anMoney is one of the few things I still use my tablet for and I've tried switching to other desktop programs but yours still wins, hands-down). And I'd be happy to pay a subscription for the privilege (something reasonable like £5 to £10 per year), as I don't feel like I'm giving you enough money for all the work you do - I paid £7 two years ago and get continual updates, which can't be sustainable for you.

[Isabelle Auryn]

Hello,

I am totally agree with this new feature. I would like to sync my anmoney data with my tab, phone, computer, etc..

What I don't want is to give my account number and sync with my bank website. I don't want this. 

[Mark Koenig]

I would love to have a sync option so I can easily use my phone and tablet with anMoney and have no problem with you adding internet access. As someone stated already this doesn't mean anyone will be able access my phone, it just means the app can access the internet, and it's whether or not you trust the app/app developer or not. In this case I trust the app and developer and therefore see no problem with internet access.

Also I seen someone posted about creating 2 apps, one with and one without, and I agree with your response that it wouldn't be practical. However another solution along the line of 2 apps could be an add on app that has the sole purpose of syncing data with the cloud/internet. This way the main anMoney app could continue to be sold and used normally without internet access, and if you want syncing, you would have to install the additional add on app that acts a proxy to the internet. If you kept the API between anMoney and this proxy app, simple and not data specific, then you could continue to add features to anMoney without constantly having to update this app as well. Not knowing the internals of anMoney, I can't say how difficult something like this would be or if even possible, but I do know it is possible within android development. In addition you could even choose to charge a fee for the additional add on app/feature, not sure if you would want to do this in the risk of alienating current users, but I would be happy to pay a couple/few extra dollars to get the syncing feature added to anMoney since it is one of the apps I use most often.

[Тарас Бородий]

Hello!

Personally I don't see any inconveniences about allowing Internet permission for this app.

Also It would be great if you implement synchronization between devices, so people could add entries on different devices and not worry about loosing some entries while restoring book from other device's backup.

And last one wish for you is to create a web-based service, which would sync with this app, something like Cash Organizer implementet. AnMoney is much more powerful app but their web-site is a big plus. Check it out for example.

Thank you!

Best Regards,

Taras Borodii!

[Petr Hejl]

Hi, no problem with the permission itself.

If there would be some sync feature I would like to see a master switch for such feature in settings. I chose anMoney over other solutions and this was one of the reasons. The data are too sensitive to be uploaded to a cloud.

Thanks,

P.

[Stefano Cislaghi]

I'm positive with this decision. I do not see any direct security hassle for this.

 

Ste

[Leandro Sousa]

I also vote for a yes on the internet permission to sync

[Atte Lehtinen]

Me too. But frankly speaking, I'm losing my faith with this subject.

[EJames]

I solved the cloud and desktop problem with Dropsync and Blue Stacks for windows. EJames

[Atte Lehtinen]

Me too, until something went terrible wrong and I lost transactions for a week or so. The Dropsync solution is not suitable for normal everyday use with several devices.

[mrdickie]

I'm fine also with Internet permissions. I would love to be able to add transactions or other data via my PC or tablet and have it sync to my phone.
Then all this app would need is the ability to mind read and you'd just have to think to your phone instead of sync lol

[grayme]

A couple of responses to this thread appear to have been deleted shortly after they were added, or am I misunderstanding something?

Personally I cannot see us ever getting syncing.

[Andi Northrop]

Deletions might be because most discussion has been moved away from here and towards the Google+ community but I agree that significant changes to the app seem unlikely. It looks like the app is now being maintained rather than actively developed, however, that is just pure speculation on my part.

[SamuelChang]

I am fine for internet permission if any feature is cool and useful for me.