121–130 of 274 posts
Everybody complains about the walled garden, but damn I love to see things like this.
You do realise Apple could still do this in their app store AND allow 3rd party app stores?
Everybody complains about the walled garden, but damn I love to see things like this.
That's all right with Apple:
https://www.securityweek.com/malicious-behavior-found-advert...
These rules are not worth the bytes used to transfer them. It's the epitome of selective enforcement.
Earlier quoted context omitted.
Doesn't Apple track every app you install, access and run? Track you if you want to develop your own code for your own fully paid for device?
On iOS under: Privacy -> Analytics & Improvements They (a) show what data is being sent e.g. stack traces and (b) provide the privacy policies. At least on my device I am not seeing a list of apps being sent to Apple.
If your device offloads apps, they know when you download it again and thus can infer usage.
Earlier quoted context omitted.
You've bought the privilege of being allowed to accept the EULA.
It reminds me of a US visa, which is far from free, and you pay for applying whether you is granted it or not. It allows you travel to a border control and ask to be let in. They can refuse you without explanation.
I met a Italian man at immigration control in Ethiopia, at the Addis Ababa airport, he had been traveling Africa and this was his third attempt to enter Ethiopia. The first two attempts were via land borders with Kenya and he had been turned around both times, despite having a visa, because border control felt it would be too dangerous for a white man to travel through southern Ethiopia at the time. So he had to travel to Nairobi and get a flight; he was admitted this time, but he had to pay for another visa at the airport. Unclear why? He wasn’t best pleased about the whole thing.
WhatsApp gates many features behind Contacts access. Do the same rules apply to everyone, even Facebook?
Full text of the clause: > 3.2.2 Unacceptable > (vi) Apps should allow a user to get what they’ve paid for without performing additional tasks, such as posting on social media, uploading contacts, checking in to the app a certain number of times, etc. Apps should not require users to rate the app, review the app, watch videos, download other apps, tap on advertisements, enable tracking, or take other similar actions…
I find that policy entirely acceptable, for the same reasons I think shrink-wrap EULAs should be illegal. This makes me curious about Apple and iOS / OS X. Does Apple try to require that the user accepts an EULA for the OS after buying Apple hardware?
IMHO that EULA's main purpose atm is to tell you that you can only install MacOS on, and I quote, an 'Apple-branded computer'.
This led to a hilarious habit of Hackintosh users including myself just sticking the Apple stickers from their iPods or other Apple devices on their custom built machines. Wouldn't hold up in court, of course, we were just having fun with the wordplay.
Everybody complains about the walled garden, but damn I love to see things like this.
Remember that app SDK that decided to hijack every URL open and leak auth tokens back to the mothership? That's all right with Apple: https://www.securityweek.com/malicious-behavior-found-advert... These rules are not worth the bytes used to transfer them. It's the epitome of selective enforcement.
> […] the tech giant has found no evidence that apps using the Mintegral SDK are harming users. […] The company says app developers are responsible for the behavior of their products, including the behavior of third-party code, and they should exercise caution when using third-party code to insure it does not accidentally undermine security and privacy.
This seems to be correct. This is an SDK the application developer chose to use. Its behavior may be harmful to other ad networks, but doesn’t seem to have any effect on the user. Which is to say, the SDK isn’t doing anything the app itself couldn’t just do itself. The SDK may be doing stuff the developer isn’t aware of, but that’s true of any third-party code, and this is why developers need to ensure they validate third-party code appropriately.
Everybody complains about the walled garden, but damn I love to see things like this.
You do realise Apple could still do this in their app store AND allow 3rd party app stores?
I absolutely detest this idea of third party app stores. Please tell me why this is a good idea when literally your entire life and its contents are contained in this palm sized device.
Do you really want sideloading of apps that asks average joes for ransomware?
We already have another sandbox - browsers. And you're seeing problems with extensions, popups, .dmg downloads and .exe virus scans, etc. So much so that browsers are constantly fighting against attacks for 20 years.