Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple requires account deletion within apps in AppStore starting January 31

developer.apple.com

Post reply on HN
Print view View original

291–300 of 515 posts

Re: Apple requires account deletion within apps in AppStore starting January 31

#291

Post by VectorMath »

slownews45 wrote: post #244
gbear605 wrote: post #234

Earlier quoted context omitted.

The problem is how Apple both profits from the app store and sets rules on the app store. It’s incentivized to create rules that make it money without helping users. Apple needs to either stop making money from the app store or to create a separate body that can set rules without being incentivized by profit. Laws are good, but the lawmakers shouldn’t profit from them.

Walmart profits from their store and sets the rules from their store. The incentive is to make the store a place people want to spend money. This is the same as almost any other store isn't it? You do that by making it safe and comfortable for users (or in androids case maybe by doing deals with phone companies to pre-load their apps and make money off users there ). Apple is only partly successful, they have 15% mar…

Except, as a seller, I have multiple avenues to deliver my product to customers other than Walmart. On top of that, Walmart charges a fee per sale [1], and doesn't get to double dip into additional services rendered on top of that product. As soon as the sale is done through Walmart, they're cut out of the picture. Could you imagine Walmart demanding a 30% cut of profits if I sell a video game with in-game purchases--just because they performed the task of stocking it on the shelf?

[1] https://deliverr.com/blog/costs-of-selling-on-walmart-vs-ama...

Re: Apple requires account deletion within apps in AppStore starting January 31

#292

Post by d23 »

madars wrote: post #4
gumby wrote: post #2

Wonder if this can be used to unsubscribe from The NY Times?

I heard you can change your address to California, which then gives the option to cancel online (due to state law). It is absolutely ridiculous that NYT will happily take your card info online, but require you to be on hold to speak with their "customer care" to cancel. Maybe it is time to use virtual CC's a la privacy.com.

I love privacy.com for this, and I’ll never sign up for a trial or something recurring without using it again.

I signed up for a trial for another service which shall remain unnamed, and of course I couldn’t find anywhere on the site to cancel my trial once I wanted to. No problem, I just disabled the card. They’ve probably tried to bill me a dozen times since.

Re: Apple requires account deletion within apps in AppStore starting January 31

#293

Post by dwaite »

Hermel wrote: post #68
anarchogeek wrote: post #27

What about inmutable systems? My app (using scuttlebutt) creates an 'account' but it's located as crypto keys only within the app and apple keychain. So far the apple reviewers refused to believe that it works like. It's open source, they've got the code... but still.... Same is true for anything crypto. The account as it were exists on many devices, but it's not something you as the app creator can manage. I think a…

Blockchain wallets are an interesting case. I would argue that for example an Ethereum wallet that generates an address for you in the Ethereum system is not required to provide a way to delete that account again. Similarly, the Chrome app is not required to allow you to delete your hackernews account even though you created it using the Chrome app. Generally, if an app enables you to create an account in a system co…

I do not believe Apple will make a distinction based on corporate structure - if you support creating an account, you need to support deleting it. If you can't support deleting it, you can't support creating it in-app.

That said, I would argue that there is no Ethereum "account" - it's just a crypto key. In that sense, use on Ethereum is similar to someone using an email address to sign up for mailing lists and to post on forums.

The counter-argument is that your wallet app likely provides the interfaces to do that functionality, which makes the Ethereum blockchains a proper system under consideration.

Re: Apple requires account deletion within apps in AppStore starting January 31

#294

Post by chipotle_coyote »

asdf3243245q wrote: post #204
wizzwizz4 wrote: post #154

Earlier quoted context omitted.

What bank lets you create an account just from the app? … Okay, the digital-only ones, maybe. But virtually all other banks I've used make you go to a branch.

I think most major brick and mortar banks allow you to open account fully online. Try going to random bank websites and click on "open account".

The guidelines apply to creation of accounts within the app, not just anywhere online.

Re: Apple requires account deletion within apps in AppStore starting January 31

#295

Post by gregoryl »

unityByFreedom wrote: post #167
nightski wrote: post #96

Earlier quoted context omitted.

Hate to break it to you but banks are not deleting your account immediately when you close it. They legally can't.

A deleted bank account is not publicly accessible.

Not as a counterpoint, but you'd be mad not to stick "yet" at the end of that.

Re: Apple requires account deletion within apps in AppStore starting January 31

#296

Post by Daegalus »

anarchogeek wrote: post #27

What about inmutable systems? My app (using scuttlebutt) creates an 'account' but it's located as crypto keys only within the app and apple keychain. So far the apple reviewers refused to believe that it works like. It's open source, they've got the code... but still.... Same is true for anything crypto. The account as it were exists on many devices, but it's not something you as the app creator can manage. I think a…

my guess would be to just delete all local data, instruct the user to destroy all private keys, and consider the data delete it. I think in this situation, best effort to "delete" the data is all you can do. IN this case, if all keys are deleted, the data effectively becomes meaningless bits.

Re: Apple requires account deletion within apps in AppStore starting January 31

#297

Post by hahajk »

d23 wrote: post #292
madars wrote: post #4

Earlier quoted context omitted.

I heard you can change your address to California, which then gives the option to cancel online (due to state law). It is absolutely ridiculous that NYT will happily take your card info online, but require you to be on hold to speak with their "customer care" to cancel. Maybe it is time to use virtual CC's a la privacy.com.

I love privacy.com for this, and I’ll never sign up for a trial or something recurring without using it again. I signed up for a trial for another service which shall remain unnamed, and of course I couldn’t find anywhere on the site to cancel my trial once I wanted to. No problem, I just disabled the card. They’ve probably tried to bill me a dozen times since.

was it… stamps.com? adobe? wsj? a gym?

Privacy.com is free, but I’d pay quite a bit of money for it, it has saved me hundreds of dollars.

Re: Apple requires account deletion within apps in AppStore starting January 31

#298

Post by barsonme »

dwaite wrote: post #289
barsonme wrote: post #261

Earlier quoted context omitted.

If AES is broken in your lifetime, you're going to have _way_ bigger problems than somebody decrypting your blockchain ciphertext. And if you're not encrypting data with AES (or one of a handful of other algorithms), then you should be worried _now_.

Bitcoin blockchain does not use AES, wallets do. Elliptic curve signatures of the blocks are _significantly_ more fragile to quantum attacks than AES.

The thread is about somebody storing ciphertext in a blockchain.

Re: Apple requires account deletion within apps in AppStore starting January 31

#299

Post by sneak »

codedokode wrote: post #246
nawgz wrote: post #193

Earlier quoted context omitted.

Isn't this almost necessarily true for any system which needs an auditable history? Just thinking out loud, of course cascading deletes will fail, so I guess you could avoid using true foreign keys to the user table for things which are truly related, and then you'd know what the user did but presumably no PII... Seems insanely sketchy though. Way cleaner to soft delete if you ever need to recover history, which the…

You don't need to delete the rows from the database. Just replace user's name, address and phone with random data.

Regulated financial services must also store the documentation and results for how they verified a user's identity, too. This involves talking to third parties that can tell you if a given user's name matches their tax identifiers, street addresses, phone number, et cetera.

Anyone competent is storing both their requests to those external APIs, as well as those responses, for the entirety of the recordkeeping requirement period.

Re: Apple requires account deletion within apps in AppStore starting January 31

#300

Post by dev_tty01 »

asdff wrote: post #185
bobbylarrybobby wrote: post #95

Earlier quoted context omitted.

The point is that you don't want someone re-registering on iCloud with that gmail address because then they could impersonate you when interacting with Apple.

I still don't get it. You cancel the account, it should be gone like it never happened. Poof. If you make a new account with the same email, it should be a new account with no relation at all to the old account since that one has been deleted and is gone forever and there would be nothing to impersonate here.

Let's say you have the account johndoe@icloud.com. You use that email as your backup email at your bank. You cancel the account. Now someone else opens a new icloud account with johndoe@icloud.com. They can now access your account by "recovering" your password with the backup email.
Post reply on HN