Vaughn | Pixxl: out of curiosity would giving the application access to the camera open any vulnerabilities

$ODIN Hypo: Can't think of any off the top of my head?

$ODIN Hypo: Perhaps make it an option? In general, people that are paranoid about privacy won't want to give an app access to the camera. The permission might be required by Android at the time of installation, so perhaps some explanation on the Google Play page, or in the app itself about why that permission is needed (and make sure the app still works if the camera permission is denied).

Also, for the extreme paranoid that still want to use the QR feature, an option to use a photo from the gallery would be useful (but then again, that might require access to the filesystem...).

mrblister: It may be possible to ask for camera permissions on a case by case basis, otherwise it would be permission wide. Ideally it is off by default and only asked when used (once, or always allowed).

Additionally, access to the media gallery I believe is part of the filesystem which is another permission.