Live data from Hacker News

Dictionary app auto-posts piracy accusations on users’ Twitter accounts

pocketables.com

41–50 of 129 posts

Re: Dictionary app auto-posts piracy accusations on users’ Twitter accounts

#41

The developers are calling this a "bug." https://twitter.com/keitaigoddess/status/263995697571971072 https://twitter.com/keitaigoddess/status/263995940602535936

They or rather Twitter should revoke their oauth keys. Then push an update to the store with new keys.

Excuse my ignorance but would this work if the app is posting as the user themselves?

Re: Dictionary app auto-posts piracy accusations on users’ Twitter accounts

#43

The developers are calling this a "bug." https://twitter.com/keitaigoddess/status/263995697571971072 https://twitter.com/keitaigoddess/status/263995940602535936

Oh. They slipped and fell on that impersonation code?

Re: Dictionary app auto-posts piracy accusations on users’ Twitter accounts

#44
post #39

Earlier quoted context omitted.

From what I understand, piracy on iOS isn't an issue. The only place where it's really significant is China. And there are two points to keep in mind there: 1. Stopping piracy of a single app in China is very unlikely to result in increased sales of that app. 2. There's no Twitter in China.

Well, what makes something an issue? There is certainly piracy on iOS... people jailbreak their phones and then pass around ipa files on the standard piracy sites. I'd say it is similar to piracy on game consoles. It exists but you need to do something unusual to enable it, so most people don't do it.

Right. It happens, but that's not the same as being an issue. In terms of a developer efficiently using their time, chasing after the heard of your app because it was one of the ones they found on a piracy site, is not a good strategy.

Re: Dictionary app auto-posts piracy accusations on users’ Twitter accounts

#45
post #33

Apple needs to burn these people to the ground as an example to others. Pull their apps, refund their customers, and ban them from all Apple platforms for life. If Apple doesn't severely punish this sort of thing, then just what good is their fancy walled garden?

Well, they've been, illegally, pursuing their own interest exactly as the people using the app without paying. I don't see anything excessive here; I'm not saying that I justify them of course.

You don't see anything excessive about impersonating somebody and surreptitiously posting a public apology for piracy on their behalf? Huh?

Re: Dictionary app auto-posts piracy accusations on users’ Twitter accounts

#46

If you're an iOS app developer... The correct way to check if your app has been pirated requires two steps: 1) You must be running on a jailbroken system. Check this by trying to read from outside the sandbox. 2) Check if your app's signature is invalid. Checking this is fairly involved. Look around for code. If either of these two are false, then you've not been pirated (point (2) will be true when your app is check…

Even if both are true, the app still may not have been pirated. I wouldn't take any action based on this information beyond perhaps gathering statistics (and keep in mind that those statistics could be way off).

Re: Dictionary app auto-posts piracy accusations on users’ Twitter accounts

#47

Earlier quoted context omitted.

They or rather Twitter should revoke their oauth keys. Then push an update to the store with new keys.

Excuse my ignorance but would this work if the app is posting as the user themselves?

They're using iOS's built-in Twitter functionality, which I believe Twitter sees as simply coming from iOS. Twitter might possibly have a way to block this stuff, but I don't believe it shows up as a separate authorized app for the users to deny.

Re: Dictionary app auto-posts piracy accusations on users’ Twitter accounts

#48

If you're an iOS app developer... The correct way to check if your app has been pirated requires two steps: 1) You must be running on a jailbroken system. Check this by trying to read from outside the sandbox. 2) Check if your app's signature is invalid. Checking this is fairly involved. Look around for code. If either of these two are false, then you've not been pirated (point (2) will be true when your app is check…

Does checking for those things slow down the load time of the app? Wouldn't that punish paid users?

The files you're reading are already cached by the OS (to perform the exact same work). The only processing involved is computing a hashes and a small RSA encryption.

Less than half a millisecond?

Re: Dictionary app auto-posts piracy accusations on users’ Twitter accounts

#49
post #46

If you're an iOS app developer... The correct way to check if your app has been pirated requires two steps: 1) You must be running on a jailbroken system. Check this by trying to read from outside the sandbox. 2) Check if your app's signature is invalid. Checking this is fairly involved. Look around for code. If either of these two are false, then you've not been pirated (point (2) will be true when your app is check…

Even if both are true, the app still may not have been pirated. I wouldn't take any action based on this information beyond perhaps gathering statistics (and keep in mind that those statistics could be way off).

Apple explicitly suggest an exit(173) if the certificate check fails for Mac App Store apps.

Although I've definitely had non pirate users report this error to me because they've drag and dropped the app onto another machine instead of reinstalling from the App Store -- so you're right, it's not a guarantee that they're a pirate in an absolute sense.

Re: Dictionary app auto-posts piracy accusations on users’ Twitter accounts

#50
post #24

It would be obviously wrong and illegal for a stranger to come into your home, secretly inventory all physical items in your possession, and then impersonate you on, say, a global TV broadcast in which you're wrongly accused of stealing things. It should also be obviously wrong and illegal for any app secretly to inventory everything in your phone and then impersonate you on a Twitter broadcast in which you're wrongl…

> Our laws, regulations, and societal norms have a long way to go before they catch up with technology.

Oh, that remains to be proven. Impersonating someone else to have them describe themselves as a criminal is pretty clearly legally actionable, both in a civil and criminal sense. There's every likelihood that the laws and regulations will work just fine. And judging by this post, societal norms are also working just fine to disapprove of the behavior.

The guy has come up with a new way to violate laws/social norms, to be sure. But that doesn't actually mean they aren't working. They are flexible enough to adapt to most new situations and this is certainly one covered by them.

Post reply on HN