While working on my Toggle 2G app , I found that I can run an app in the CM6 system process by signing it with the CM6 cert. If you download the apk from my app thread, and install it, you will see that the app will have access to your entire phone and all permissions are listed. This is a good thing since it actually tells you that it will have all permissions.However when I posted this app to the market, and installed it, it only showed the 1 permission! This means that anyone running a custom ROM, like CM6, with a key that is available to anyone can download an app from the market that has full access to your phone without you knowing it.Discuss....