Live data from Hacker News

A top-grossing scam on the App Store

twitter.com

271–280 of 285 posts

Re: A top-grossing scam on the App Store

#271

Earlier quoted context omitted.

You don't need to trust Google. If you buy a Samsung phone, for example, their official domain would be printed in their documentation.

https://www.samsung.com/us/support/owners/app/smartthings.ht... They link directly to the app. They almost certainly have relevant QR codes in the manuals to go directly to the app downloads. You can find the official app listed by "Samsung Electronics", where the "scam" app is by a third party. There are a lot of problems and egregious abuses in the app store (made much worse once recurring subscriptions appeared),…

"For someone to miss the Samsung app and download this, then agree to a subscription and pay, is something that I don't think many people would do. And it certainly isn't a fault of the store."

I did exactly that, and I'm usually pretty savvy.

Re: A top-grossing scam on the App Store

#272
post #270

Earlier quoted context omitted.

https://us.norton.com/internetsecurity-emerging-threats-ios-... https://www.wired.com/story/apple-app-store-malware-click-fr...

As anyone who clicks on those links can see, those are neither Ransomware nor Botnets, so it’s not obvious what point you are trying to make. Hard to see how you think such links support your argument for dismissing the security model. Also of note - the central App Store was used to fix these problems.

Truth be told, I find nothing wrong with the central App Store security model, merely that the status quo is insufficient. They should either ramp up enforcement on the store drastically, and/or open up the platform to third party stores, and thus competition, for other stores to attempt better ways at enforcing security and user privacy.

I do not view opening up the platform to third party stores or sideloading to be an excessive security risk, because having studied iOS's security model, it seems to be reasonably hardened (at least compared to Android) and I believe that Apple can manage the existence of other app sources well enough to prevent them from becoming significant malware vectors. The fact that those malware links are neither ransomware nor botnets proves how inherently secure iOS is, and thus protections are built into the operating system level, thus making the existence of third party stores irrelevant to its security.

Re: A top-grossing scam on the App Store

#273
post #269

Earlier quoted context omitted.

> Not literally, but it was still a lie: Very well, I can actually admit fault, unlike others in this conversation, and I was indeed mistaken when I claimed that no one is mandating it. That said, this entire conversation was only tangentially related to Epic, there are people beyond them who want third party app stores on iOS, and not all of them want them to be first class alternatives, nor is Epic's case the alpha…

> Not literally, but it was still a lie: Very well, I can actually admit fault, unlike others in this conversation, and I was indeed mistaken when I claimed that no one is mandating it. Are you saying you weren’t familiar with Epic’s case? > If anything, Apple willingly ceding some power to non-first class third party stores could potentially defang Epic's complaints, This is a restatement of the Orwellian argument t…

> Are you saying you weren’t familiar with Epic’s case?

Epic's case is irrelevant to the larger debate at hand. They are not the only ones who want Apple to open up their platform, and not everyone who wants them to cares for third party stores to be "first-class App Store alternatives." You are arguing against a strawman if you insist that Epic's demands be the only metric for debate. Go take it up with Sweeney.

> This is a restatement of the Orwellian argument that if Apple doesn’t want to be forced to open their store, they must open their store.

That is reductionist interpretation of the situation. Apple can continue to fight the calls to open their store, not just from Epic but from the developer community and power users at large. And that is most likely what they will do. However, they would engender much more praise and respect if they were to do a partial opening. Instead they have chosen to persist in being Big Brother and not heed calls to open.

> Also it seems like although you downplay Epic’s role, you have deployed this argument repeatedly now, and it relies on there being someone to force Apple, such as Epic or an Antitrust authority.

Not really, the ultimate force is community goodwill and Doing the Right Thing. Apple could choose to satisfy unhappy developers and users by allowing more consumer choice. Even if the case was to be thrown out today and regulators to all look elsewhere, this groundswell of grassroots dissatisfaction will remain unless Apple deigns to Do the Right Thing.

> It could, or it could do a great deal of harm to the market.

Says you. It's a debatable point. We have been debating it, or at least attempting to, but you seem to have many tangents for us to quibble over instead.

> Perhaps Apple simply doesn’t agree with your assessment.

Apple is choosing the path of least resistance in holding on to the status quo. They usually choose this path. It's possible that they have not actually considered any alternative assessments.

> Yes. When I was a teenager I was enamored with communism. I grew out of that phase.

And yet you choose to unquestionably shackle yourself to a different monolith. Curious.

> What other markets do you have in mind?

Android. Desktop PC. Mac OS itself. These examples have been trotted out already.

> Not if they want commonly used Apps that are not in those stores.

Then they can default to using the App Store. No one is taking away the App Store in this scenario.

> No, it’s not similar because the iOS store does have all the apps.

It also has a lot of malware, which these third party app stores might not have.

> No, because then they wouldn’t have access to the wide range of apps.

> No you didn’t.

Those links also mention the networks effects issue, that it is unlikely for every single major publisher to create their own app store platform. Can you imagine all of the effort and resources it would take to do that? There is no Uber or Twitter only app stores on Android. Amazon, Samsung, other OEMs may have Android app markets, because they're OEMs. Unless we're talking about the special case of the Chinese market, or maybe PC games, you're going to have to do better than that in terms of justifying why a corporation of the size of Facebook or Microsoft would choose to go through the bother of building their own iOS app store, when they're already refraining from doing so on Android!

Not to mention, where's the Amazon app store for PC or Mac OS? Why would iOS be the only platform where you see dozens of app stores? Do you even have any idea of how the mobile app industry works? Can you give a business justification for this? Just because they "could", doesn't mean these companies would. Especially since the "could" isn't only barred by Apple's technical restrictions, but by real-world business decisions. So what, is Amazon just going to create an entire store for its Kindle and Alexa apps? Is Facebook going to build an entire store for its seven or eight apps? Are they going to add unnecessary restrictions when the majority of non-power users would be using the App Store anyway? Please.

This whole anti-third party app store/sideloading scenario seems to be a slippery slope argument constructed by wild speculative points:

1. Major developers both established or new hot new unicorn startups would build their own app stores, and make their apps exclusively available on those stores.

2. These stores will be a significant source of malware, because apparently only Apple is capable of decent curation. (And yet you deny that they're capable of creating a secure operating system.)

3. The ability to use third party stores or sideload apps would be readily available to iOS users, and not properly gated in such a way for Apple so that only power users would take advantage of this ability. (Or, as I theorize elsewhere, Apple wouldn't build in UX patterns so that users are stigmatized against non-App Store origin apps, as they already do on macOS via Gatekeeper towards unidentified developers.)

3.5. In the situation where they had to support non-App Store apps, Apple wouldn't simply build a Gatekeeper-type system for iOS anyway. Or otherwise devise other ingenious solutions to potential third-party app store security vulnerabilities. Or, as others have pointed out in this thread, restrict sideloading of apps only to those that have been properly code-signed/notarized.

4. The existence of third party app stores/sideloading would inevitably lead iOS to become more insecure, because for some reason a significant number of users will stop using the App Store and seek out insecure apps instead. And the existence of those insecure apps will also somehow impact users who continue exclusively using the App Store.

5. Perhaps a rehash of several of the previous points, but the assumption that the main source of security of iOS is the App Store review process itself, and not security features baked into iOS.

6. That all of this will actually significantly impact Apple's market share.

?. If we were to look at both PC and Mac desktop software, why would users even need to go to alternate third party app stores to get software? Couldn't they simply purchase software directly from publisher's sites, and download the .ipa's through there? Which could be a vector for insecurity, but in those cases it would be more of a per-publisher site basis, and not a question about shady third party app stores.

When crafting a hypothetical, it is important to remain objective. Worst-case scenarios about iOS opening up often lack the objectivity in seeing both the possible advantages and opportunities, choosing to focus on only disadvantages and threats. In doing so, they ironically often downplay the existing strengths of iOS, which go beyond the (aforementioned slipping) App Store review system. These arguments also fail to actually present a technical security threat model explaining how exactly would iOS be adversely affected.

As such, they are often fear-mongering and do not withstand close inspection. It would be nice if there were more of these arguments that attempted to provide evidence at a higher level, though.

> Are you suggesting you do not stand behind what you are saying?

It's important to remain objective in these discussions and not assign personal motivations.

Re: A top-grossing scam on the App Store

#274
post #270

Earlier quoted context omitted.

As anyone who clicks on those links can see, those are neither Ransomware nor Botnets, so it’s not obvious what point you are trying to make. Hard to see how you think such links support your argument for dismissing the security model. Also of note - the central App Store was used to fix these problems.

Truth be told, I find nothing wrong with the central App Store security model, merely that the status quo is insufficient. They should either ramp up enforcement on the store drastically, and/or open up the platform to third party stores, and thus competition , for other stores to attempt better ways at enforcing security and user privacy. I do not view opening up the platform to third party stores or sideloading to…

> They should either ramp up enforcement on the store drastically,

This, I agree with.

> and/or open up the platform to third party stores, and thus competition

This I disagree with. As stated elsewhere, I simply don’t think security will be the basis for such competition because it relies on end users to be able to make that a priority over just running the apps they want.

I think if Apple is unable to maintain the security of the platform, competition is the answer, but in the form of other platforms, not Apple being forced to allow alternative stores.

Re: A top-grossing scam on the App Store

#275
post #269

Earlier quoted context omitted.

> Not literally, but it was still a lie: Very well, I can actually admit fault, unlike others in this conversation, and I was indeed mistaken when I claimed that no one is mandating it. Are you saying you weren’t familiar with Epic’s case? > If anything, Apple willingly ceding some power to non-first class third party stores could potentially defang Epic's complaints, This is a restatement of the Orwellian argument t…

> Are you saying you weren’t familiar with Epic’s case? Epic's case is irrelevant to the larger debate at hand. They are not the only ones who want Apple to open up their platform, and not everyone who wants them to cares for third party stores to be "first-class App Store alternatives." You are arguing against a strawman if you insist that Epic's demands be the only metric for debate. Go take it up with Sweeney. > T…

> It's important to remain objective in these discussions and not assign personal motivations.

Do you claim to be objective?

> Not really, the ultimate force is community goodwill and Doing the Right Thing. Apple could choose to satisfy unhappy developers and users by allowing more consumer choice. Even if the case was to be thrown out today and regulators to all look elsewhere, this groundswell of grassroots dissatisfaction will remain unless Apple deigns to Do the Right Thing.

There is nothing objective about this. It’s just you saying what you think is right. The fact that a small number of developers are vocal about it doesn’t change that.

You list a series of numbered points which are a strawman of the case against Apple being forced to allow sideloading or alternative stores. However suffice it to say that you dismiss a lot of stuff as speculative and unlikely, with only your own speculation as the counterargument.

I’m not going to bother to comment on every part of it, but a couple of points stand out:

> 6. That all of this will actually significantly impact Apple's market share.

My turn to say ‘nobody is saying this’. Possibly someone is, but I haven’t seen it and it’s ceerainly not part of any argument I am making. I don’t care about Apple’s market share.

There is a good chance it would actually go up in if they were forced to allow alternative stores.

> Not to mention, where's the Amazon app store for PC or Mac OS? Why would iOS be the only platform where you see dozens of app stores?

> Do you even have any idea of how the mobile app industry works?

Are you aware of how much money Facebook makes from ads for Apps? Can you see that they would make more if thet could take the 30% for themselves?

Are you aware that Google operates a search engine, and would be able to take a margin for themselves if they were able to complete App installs on their own store?

> Can you give a business justification for this?

Yes.

> So what, is Amazon just going to create an entire store for its Kindle and Alexa apps?

No, but are you aware thar Amazon search is starting to rival Google because people go straight there when searching for products? Getting to sell apps and take 30% would be an obvious complement to their department store mode.

This is the essence of the argument you keep repeating. You just claim that nobody serious would bother to create alternative stores.

The business cases are fairly obvious, and the dollar amounts are in the billions. I’m surprised you don’t see this.

Re: A top-grossing scam on the App Store

#276
post #275

Earlier quoted context omitted.

> Are you saying you weren’t familiar with Epic’s case? Epic's case is irrelevant to the larger debate at hand. They are not the only ones who want Apple to open up their platform, and not everyone who wants them to cares for third party stores to be "first-class App Store alternatives." You are arguing against a strawman if you insist that Epic's demands be the only metric for debate. Go take it up with Sweeney. > T…

> It's important to remain objective in these discussions and not assign personal motivations. Do you claim to be objective? > Not really, the ultimate force is community goodwill and Doing the Right Thing. Apple could choose to satisfy unhappy developers and users by allowing more consumer choice. Even if the case was to be thrown out today and regulators to all look elsewhere, this groundswell of grassroots dissati…

Also - it seems worth following up on this:

>> Are you saying you weren’t familiar with Epic’s case?

> Epic's case is irrelevant to the larger debate at hand. They are not the only ones who want Apple to open up their platform, and not everyone who wants them to cares for third party stores to be "first-class App Store alternatives." You are arguing against a strawman if you insist that Epic's demands be the only metric for debate. Go take it up with Sweeney.

Ok, but this indicates you knew about the case and intentionally lied - it wasn’t just a ‘mistake’ as you claimed earlier.

Re: A top-grossing scam on the App Store

#277

Earlier quoted context omitted.

Fair enough, I appreciate the honesty & civility. I'd love to see a link to your open source project or related material in a reply, mostly out of curiosity.

No. I won't post it publicly. It's not a state secret, and can be figured out, by looking through my links, but it's easier to simply email me, and I'll send it. It's the kind of thing that is best left relatively "uncredited," and is important only to a certain demographic; but within that demographic, it is very, very important.

Ah I didn't realize that. I've contacted you through the contact form in one of your company websites.

Re: A top-grossing scam on the App Store

#279

Earlier quoted context omitted.

Isn’t Fortnite basically entirely back on the play store and that’s where most users are coming from? That proves it doesn’t work.

You're right ( https://techcrunch.com/2020/04/21/epic-games-launches-fortni... ), I suppose that they evaluated those 18 months and judged that it wasn't as profitable not being on the Play store. But ISPs still deliver apps through their app stores, and whole segments of big players also successfully distribute outside of it, out of necessity: adult content and the Chinese ecosystem. Note that the DMM example I cite…

What or how are adult sites distributing successfully? I think the biggest paid sites have apps. But I’ve never personally heard of any one using any porn tube site app or anything. Browsers are used.

I’m genuinely curious. I have no clue.

Re: A top-grossing scam on the App Store

#280
post #275

Earlier quoted context omitted.

> Are you saying you weren’t familiar with Epic’s case? Epic's case is irrelevant to the larger debate at hand. They are not the only ones who want Apple to open up their platform, and not everyone who wants them to cares for third party stores to be "first-class App Store alternatives." You are arguing against a strawman if you insist that Epic's demands be the only metric for debate. Go take it up with Sweeney. > T…

> It's important to remain objective in these discussions and not assign personal motivations. Do you claim to be objective? > Not really, the ultimate force is community goodwill and Doing the Right Thing. Apple could choose to satisfy unhappy developers and users by allowing more consumer choice. Even if the case was to be thrown out today and regulators to all look elsewhere, this groundswell of grassroots dissati…

> Do you claim to be objective?

No. Do you?

> The fact that a small number of developers are vocal about it doesn’t change that.

The fact that it's a small number of developers- which is a debatable claim- doesn't make it wrong.

> You list a series of numbered points which are a strawman of the case against Apple being forced to allow sideloading or alternative stores.

It's not a strawman when they are arguments used by those who are against third party stores or sideloading. Some of which are your own.

> However suffice it to say that you dismiss a lot of stuff as speculative and unlikely, with only your own speculation as the counterargument.

Everything at this point is wild speculation, including your own points. It's good for both sides to acknowledge at this point that this is a whole lot of hypothesizing. I have provided evidence culled from real world examples of other software markets, which is at least less hypothesis.

> I’m not going to bother to comment on every part of it,

Then you forfeit those points on the basis of disengagement.

> Possibly someone is, but I haven’t seen it and it’s ceerainly not part of any argument I am making. I don’t care about Apple’s market share.

"It could, or it could do a great deal of harm to the market. Perhaps Apple simply doesn’t agree with your assessment."

> Can you see that they would make more if thet could take the 30% for themselves?

That wouldn't motivate them to create their own app market. They haven't done so on Android to get around Play Store regulations. They've attempted their own independent attempts at both an Android app launcher (Facebook Home) and their own Android phone (HTC First), both to overwhelming consumer apathy and lack of success.

An attempt by Facebook to try to challenge Apple or Google at their own game by doing something as blatant as opening their own app store will likely prove to be as fruitless; this is not baseless speculation - this is based on actual product history. This also extends to challenging Apple and Google by creating their own smartphones, see the failure of the Amazon Fire Phone or the lack of success of Tizen.

And again, network effects would hamstring Facebook, or Amazon, or even Google from opening their own iOS app markets; users don't want to deviate from something as comprehensive as the App Store to get these basic "utility" apps.

A more likely scenario would be game publishers such as Epic (and EA, Ubisoft, Steam, etc.) from creating their own game app stores, which would be a different story. Or if you want to come up with something even more interesting, ByteDance, which is a Chinese company and so might have more legal incentives to break free of Apple, creating its own app store centered around TikTok which is the hot new social network flavor of this time, unlike stodgy Facebook. Or WeChat - though the current lack of political obstacles have removed their incentive to be free of both the App Store or the Play Store for now. Not to mention, WeChat Mini apps show that you don't even need to build a whole damn third party app store when you can turn the app itself into a platform for other apps.

> Are you aware that Google operates a search engine, and would be able to take a margin for themselves if they were able to complete App installs on their own store?

Given the poor reputation of the Play Store, just because Google has the resources to make a competing app store doesn't mean they have the product, design talent, or organizational will to make it any good, nor compelling enough to seduce App Store users away from their existing store of choice.

So I reiterate- Facebook, Google, and Amazon are all technically capable of building app stores, but there are immense forces both within their organizations and without (network effects) that would prevent them from effectively creating alternative app stores that are worth their while. You can already see this on Android, PC, and macOS, where such alternate stores don't even exist.

Furthermore, you haven't even given a clear example of why users would flock to these stores in the first place. To get the Google Maps app or the Gmail app? If anything, this could irritate users and cause them to resist adoption, similar to situations where users are forced to use also-ran products, such as when Microsoft forces Edge users to use Bing. Or Google+ integration in everything. Or Facebook login. Why would these companies forcing users to leave the App Store be seen as anything less invasive or desperate? Where is the consumer-side demand for these alternative app stores run by other corporate giants whose bread and butter aren't apps?

Your entire scenario is based on fear-mongering that depicts Apple, in its infinite cash reserves and product/brand mastery, as helpless while all the other corporations in their product fecklessness somehow have superiority. It doesn't add up, and is a disproportionate reaction to the prospect of Apple allowing third-party app markets and sideloading.

If you can give an actual example of an analogous situation where any of your bogeymen have successfully exploited openness to cause this harmful situation you are decrying, then you have a point. But so far all you have are pointed at the snowball of possible motivations without justifying the avalanche you are claiming is inevitable.

> Yes.

You've clearly failed at it.

> No, but are you aware thar Amazon search is starting to rival Google because people go straight there when searching for products? Getting to sell apps and take 30% would be an obvious complement to their department store mode.

Tell it to the Fire Phone. I can see Alexa being a threat to Siri/the HomePod, but strength in IoT doesn't automatically translate to strength in smartphone software. What is the incentive for consumers to switch to an Amazon market? And if this exists, explain why the Amazon Android App Store is such a dud, useful only on Kindle?

Clearly these large corporations don't find it as compelling as you seem think they should.

> You just claim that nobody serious would bother to create alternative stores.

And now I've laid out why similar initiatives in the past have failed, and why creating an alternative store that people actually use would be very difficult for these large companies.

> I’m surprised you don’t see this.

Execution is what matters. You've provided a vague destination with no road map whatsoever, and I've laid out why previous expeditions have ended in failure.

Post reply on HN