Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password
1–10 of 110 posts
Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password
#2Apple could just, you know, implement oauth.
Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password
#3I would guess that most iOS users think that the confirmation message for in-app purchases (prompting you for your iCloud credentials) is from the app from which they initiated the purchase, rather than from a system service.
This probably conditions them to trust all iOS apps with their password if prompted to enter it.
Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password
#4I would guess that if they had another way to access your iCloud calendar from their servers they would. Apple unfortunately has everything linked to a single account without any sort of Oauth. This is more an issue with iCloud than it is with iTunes or the App Store.
Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password
#5I would guess that most iOS users think that the confirmation message for in-app purchases (prompting you for your iCloud credentials) is from the app from which they initiated the purchase, rather than from a system service. This probably conditions them to trust all iOS apps with their password if prompted to enter it.
Which is precisely why the thing this article is pointing out is extremely terrible - Apple should have made it a rule a long time ago that no 3rd party app can ask for Apple ID credentials.
But they dug themselves in a ditch by unifying extremely sensitive things (App Store access) & very sensitive things (email, calendar) under a single account.
A few ways to get out of that ditch:
- not allowing any iOS/Mac app store 3rd party app to ask for iCloud credentials. This will suck but at least protects the average Joe.
- forcing users to have a different password for the app store/anything that can take money from a credit card.
- using something like OAuth.
- use two step verification for app store purchases (of course, the mobile app store being on a phone makes it harder)
Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password
#6I would guess that if they had another way to access your iCloud calendar from their servers they would. Apple unfortunately has everything linked to a single account without any sort of Oauth. This is more an issue with iCloud than it is with iTunes or the App Store.
It's pretty crazy that you need to use the same credentials to "buy" a $0 app as you have to remotely lock and wipe your iphone and mac.
Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password
#7Apple could just, you know, implement oauth.
OAuth only makes sense if they provide an API for iCloud calendar, which isn't the case as far as I know.
Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password
#8I would guess that if they had another way to access your iCloud calendar from their servers they would. Apple unfortunately has everything linked to a single account without any sort of Oauth. This is more an issue with iCloud than it is with iTunes or the App Store.
It's pretty crazy that you need to use the same credentials to "buy" a $0 app as you have to remotely lock and wipe your iphone and mac.
You don't need to at all. I use two separate Apple IDs on my iOS devices.
Apple ID accounts are individually configurable for most, if not all iCloud/App Store services.
Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password
#9They can't win, can they? I'm sure if they did exactly what he suggests a long, long time ago we'd be hearing how evil they are for not allowing calendar apps to work properly on the store.