Google has yet to respond to our request for comment on Zscaler's research.
Err, I think they already did - it's called Android L I believe.
Though with the speed that new versions of Android actually make it into real use we'll be stuck with a crappy permission system for some time yet.
Biting the hand that feeds IT
