Live data from Hacker News

Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

marco.org

31–40 of 110 posts

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#31
post #10
post #7

Earlier quoted context omitted.

OAuth only makes sense if they provide an API for iCloud calendar, which isn't the case as far as I know.

It's a bog-standard CalDAV server, which isn't an API, of course, but at the same time, it sorta is.

I'd argue that CalDAV is an API - it's specified and offers operations on data. It's not JSON-Rest but an API it is.

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#32
Okay, I have a question. AppleID and pw non-withstanding, I have experienced the following. I played Where's my water2 recently and came to the end where you have to pay to get additional levels. No biggie, I did this with the first game as well. But, when I clicked the in app purchase and entered my password I was prompted with a pop saying I needed to answer my 3 security questions next. Of course I hit cancel and not okay right there.

I have never seen that an app requests the security questions when making an in app purchase. Granted it's been a while since I last made one. Can anyone tell me if this is supposed to be normal now?

I tried to talk to Disney's support but of course no answer there...

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#33
post #15

Hey everybody, Pierre from @sunrise. This is the blog post we've just published to give more context: "Users sometimes ask us why we require the user’s Apple ID and password in Sunrise, instead of using the local Calendar API. That’s a great question to ask, and we understand why users don’t want to share their credentials without context. We’ve thought a lot about that. The two reasons why we are doing this are: - o…

Why don't you run your own caldav server instead of relying upon icloud?

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#34
post #32

Okay, I have a question. AppleID and pw non-withstanding, I have experienced the following. I played Where's my water2 recently and came to the end where you have to pay to get additional levels. No biggie, I did this with the first game as well. But, when I clicked the in app purchase and entered my password I was prompted with a pop saying I needed to answer my 3 security questions next. Of course I hit cancel and…

It seems Apple is keen to push the 3 security question setup after a while on app store interactions, it's probably just unfortunate that it appeared during an in-app purchase interaction.

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#35
post #8
post #6

Earlier quoted context omitted.

It's pretty crazy that you need to use the same credentials to "buy" a $0 app as you have to remotely lock and wipe your iphone and mac.

You don't need to at all. I use two separate Apple IDs on my iOS devices. Apple ID accounts are individually configurable for most, if not all iCloud/App Store services.

I thought I had to have a new device to make a new ID?

How do you do it actually?

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#37
post #15

Hey everybody, Pierre from @sunrise. This is the blog post we've just published to give more context: "Users sometimes ask us why we require the user’s Apple ID and password in Sunrise, instead of using the local Calendar API. That’s a great question to ask, and we understand why users don’t want to share their credentials without context. We’ve thought a lot about that. The two reasons why we are doing this are: - o…

They should have rejected your app until they had an Oauth solution in place. That's the right answer to avoid training Apple users to be fishing targets.

Sunrise doesn't have a (known) security problem. Sunrise happened to reveal a glaring problem with Apple's security policies.

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#38
post #14
post #8

Earlier quoted context omitted.

You don't need to at all. I use two separate Apple IDs on my iOS devices. Apple ID accounts are individually configurable for most, if not all iCloud/App Store services.

If no one uses a feature the feature might as well not exist.

Who doesn't use this feature? Single people, that's who.

People with families have known about this feature for years. The sales staff at the Apple Stores specifically bring it up.

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#40
post #8
post #6

Earlier quoted context omitted.

It's pretty crazy that you need to use the same credentials to "buy" a $0 app as you have to remotely lock and wipe your iphone and mac.

You don't need to at all. I use two separate Apple IDs on my iOS devices. Apple ID accounts are individually configurable for most, if not all iCloud/App Store services.

I cannot even find any guidance from Apple on recommended patterns for which Apple IDs should be shared, which should be individual, and so on. This isn't even a configuration option, it's a hack that happens to work. (And there's no guarantee that Apple won't change their model tomorrow, since they've never given any guidance on what those multiple AppleIDs are supposed to mean.)
Post reply on HN