Couldn't this be accomplished simply by creating apps that deal with contacts, photos, camera, etc. and then having users download and accept the permissions themselves.
For example, imagine that any one of the contact or calendar management apps where you "Allow xxxxx to access your contacts" was produced by the NSA under the guise of an innovative startup.
Was at a conference last October where Dave Shea talked about the impact of CSS Zen Garden - but said that the web didnt need it or another one anymore. I wonder what changed his mind?
Any recommendations on how I can identify any accounts that I've registered on Yahoo over the years? I don't think that I've sent anything important to them that would still be emailing sensitive information, but can't be sure - as I never planned for the scenario in which they'd essentially turn access to my email over to a third party.