Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

marco.org

Post reply on HN
Print view View original

61–70 of 110 posts

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#61

Post by krisgenre »

k-mcgrady wrote: post #44
piyush_soni wrote: post #19

Admittedly, Android does it much better by providing oAuth, an easy way to get the users sign in, and of course APIs for almost all the popular features. And also, for installing $0 apps you don't need any credit card details at all. Even the buttons are different "Install" v/s "Buy".

>> Admittedly, Android does it much better by providing oAuth, an easy way to get the users sign in, and of course APIs for almost all the popular features. First of all this has nothing to do with iOS/Android. This is an app trying to access a web service. Apple needs to provide oath or similar for accessing their iCloud services. >> And also, for installing $0 apps you don't need any credit card details at all. Eve…

Not sure about other countries but here, in India, we can download free apps on Android without having to setup an account with credit card.

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#62

Post by coob »

msantos wrote: post #60

I wonder if the reason why they are asking for AppleID and password is because that's the only way they found to overcome the iCloud integration problem described back in April/2013 From http://sunrise-product.tumblr.com/post/47802736454/why-doesn... Why doesn’t Sunrise support iCloud/Exchange yet? Every other calendar app seems to do it, what’s taking Sunrise so long? To explain let’s breakdown a calendar app into t…

The only stated way they're going to 'revolutionise' calendar storage is by adding rich media? You can hack on EventKit for that - just used the notes or URL properties on EKCalendarItem.

Sorry, they're not getting my credentials.

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#63

Post by stefan_kendall »

nknighthb wrote: post #50
EpicEng wrote: post #45

Earlier quoted context omitted.

I'm an engineer an I didn't know you could use two accounts for different tasks on the same device. Just never thought about it, because why would I? Not a reasonable workaround, I agree.

> Just never thought about it, because why would I? Anyone with family members using their iTunes account would and has for many years. That's why it's there.

Everyone I know with family members tries to share a single login across all devices to share purchases.

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#64

Post by lylejohnson »

Moru wrote: post #57
way66 wrote: post #15

Hey everybody, Pierre from @sunrise. This is the blog post we've just published to give more context: "Users sometimes ask us why we require the user’s Apple ID and password in Sunrise, instead of using the local Calendar API. That’s a great question to ask, and we understand why users don’t want to share their credentials without context. We’ve thought a lot about that. The two reasons why we are doing this are: - o…

Not to play doomsday profet but: Apple does not want you to be able to use some other application to access data that apple is already having an application for. So expect to be shut down when apple finally realizes what your app is for.

Unless I'm misunderstanding your point, you seem to be ignoring the numerous third-party calendar iOS apps that access and manipulate your calendar. I'm using one called Fantastical, but there are many others.

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#65

Post by hayksaakian »

weaksauce wrote: post #52
kevinpet wrote: post #37

Earlier quoted context omitted.

They should have rejected your app until they had an Oauth solution in place. That's the right answer to avoid training Apple users to be fishing targets. Sunrise doesn't have a (known) security problem. Sunrise happened to reveal a glaring problem with Apple's security policies.

It's actually phishing. I bring it up because I see more than one commenter on this page that has it wrong.

it might be autocorrect changing phishing to fishing

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#66

Post by aaronem »

acqq wrote: post #35
runjake wrote: post #8

Earlier quoted context omitted.

You don't need to at all. I use two separate Apple IDs on my iOS devices. Apple ID accounts are individually configurable for most, if not all iCloud/App Store services.

I thought I had to have a new device to make a new ID? How do you do it actually?

In iOS 7, you do it under Settings/iTunes & App Store; tap "Apple ID: [whatever]" and choose "Sign out", and once signed out you'll be presented with options both to sign in under an existing Apple ID, and to create a new one. (I didn't actually do so, so there could possibly be a hoop or two to jump through which I didn't see, but I tend to doubt that.)

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#67

Post by aaronem »

zw wrote: post #10
barumrho wrote: post #7

Earlier quoted context omitted.

OAuth only makes sense if they provide an API for iCloud calendar, which isn't the case as far as I know.

It's a bog-standard CalDAV server, which isn't an API, of course, but at the same time, it sorta is.

CalDAV most certainly is an API. It's standardized [1] and everything.

[1] http://tools.ietf.org/search/rfc4791

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#68

Post by aestra »

way66 wrote: post #15

Hey everybody, Pierre from @sunrise. This is the blog post we've just published to give more context: "Users sometimes ask us why we require the user’s Apple ID and password in Sunrise, instead of using the local Calendar API. That’s a great question to ask, and we understand why users don’t want to share their credentials without context. We’ve thought a lot about that. The two reasons why we are doing this are: - o…

In your giant ad you missed the point so much it hurts.

You are asking sensitive user names and passwords you have no right to have. Just because you don’t do anything bad with them (that you say - and not yet) means nothing. You shouldn't be asking for them. Phishing attacks do exactly the same thing you do. You are not special, your users shouldn't trust you with their appleid and password anymore than any other spam email they get.

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#69

Post by jaegerpicker »

coob wrote: post #62
msantos wrote: post #60

I wonder if the reason why they are asking for AppleID and password is because that's the only way they found to overcome the iCloud integration problem described back in April/2013 From http://sunrise-product.tumblr.com/post/47802736454/why-doesn... Why doesn’t Sunrise support iCloud/Exchange yet? Every other calendar app seems to do it, what’s taking Sunrise so long? To explain let’s breakdown a calendar app into t…

The only stated way they're going to 'revolutionise' calendar storage is by adding rich media? You can hack on EventKit for that - just used the notes or URL properties on EKCalendarItem. Sorry, they're not getting my credentials.

Yeah, I'm not sure what exactly that is trying to justify but off the top of my head I can think of about 1/2 dozen different ways to tie rich media to the calendar entry. iCloud and EventKit have their issues but this just seems way wonky to me.

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#70

Post by [deleted] »

coob wrote: post #62
msantos wrote: post #60

I wonder if the reason why they are asking for AppleID and password is because that's the only way they found to overcome the iCloud integration problem described back in April/2013 From http://sunrise-product.tumblr.com/post/47802736454/why-doesn... Why doesn’t Sunrise support iCloud/Exchange yet? Every other calendar app seems to do it, what’s taking Sunrise so long? To explain let’s breakdown a calendar app into t…

The only stated way they're going to 'revolutionise' calendar storage is by adding rich media? You can hack on EventKit for that - just used the notes or URL properties on EKCalendarItem. Sorry, they're not getting my credentials.

[deleted]
Post reply on HN