Shulou(Shulou.com)11/24 Report--

CTOnews.com, July 1 news, in daily life, CTOnews.com noticed that some applications will request users to give a large number of permissions, these permissions often do not affect the normal use of applications, and grant too many permissions to these applications, it is easy to lead to user information disclosure.

Microsoft has released a command line tool called Developer Proxy, which has been updated to 0.9 preview version, which can be used to test the behavior of software calling HTTP API, to prevent developers from asking users for too many permissions, and to prevent over-authorization of the software.

▲ source Microsoft has learned that the Developer Proxy tool can grab a series of Microsoft Graph API requests issued by the application, and can automatically detect the number of API that the application needs to call. Microsoft said that these rights comparisons will be done locally, so users' data will not be uploaded to the outside world.

When the tool detects that the permissions of the application exceed the permissions actually needed by the application, it will issue a warning to the developer. At this time, the developer can adjust the software according to the actual situation. However, the invocation of the relevant permissions of the software that is eventually released to the user level still depends on the developer himself.

▲ source Microsoft friends who are interested in the tool can visit it through this link.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.