Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

marco.org

Post reply on HN
Print view View original

71–80 of 110 posts

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#71

Post by aroch »

objclxt wrote: post #18
way66 wrote: post #15

Hey everybody, Pierre from @sunrise. This is the blog post we've just published to give more context: "Users sometimes ask us why we require the user’s Apple ID and password in Sunrise, instead of using the local Calendar API. That’s a great question to ask, and we understand why users don’t want to share their credentials without context. We’ve thought a lot about that. The two reasons why we are doing this are: - o…

The one rather glaring fly in your ointment is that if your system was as secure as you make it out to be you wouldn't have been asking users to change their iCloud passwords after your database was compromised a few months ago. http://www.theverge.com/2013/11/3/5061136/sunrise-calendar-a...

In fairness, changing your password also deactivates any login tockens associated with the old password.

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#73

Post by k-mcgrady »

rajivm wrote: post #55
k-mcgrady wrote: post #44

Earlier quoted context omitted.

>> Admittedly, Android does it much better by providing oAuth, an easy way to get the users sign in, and of course APIs for almost all the popular features. First of all this has nothing to do with iOS/Android. This is an app trying to access a web service. Apple needs to provide oath or similar for accessing their iCloud services. >> And also, for installing $0 apps you don't need any credit card details at all. Eve…

You've always been able to use Google Play for free apps without a credit card...

I got an Android device about 6 months ago and couldn't download any apps until I'd setup a credit card.

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#74

Post by shadesandcolour »

lylejohnson wrote: post #64
Moru wrote: post #57

Earlier quoted context omitted.

Not to play doomsday profet but: Apple does not want you to be able to use some other application to access data that apple is already having an application for. So expect to be shut down when apple finally realizes what your app is for.

Unless I'm misunderstanding your point, you seem to be ignoring the numerous third-party calendar iOS apps that access and manipulate your calendar. I'm using one called Fantastical, but there are many others.

Fantastical uses EventKit. As do many of the other calendar apps.

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#75

Post by shadesandcolour »

aestra wrote: post #68
way66 wrote: post #15

Hey everybody, Pierre from @sunrise. This is the blog post we've just published to give more context: "Users sometimes ask us why we require the user’s Apple ID and password in Sunrise, instead of using the local Calendar API. That’s a great question to ask, and we understand why users don’t want to share their credentials without context. We’ve thought a lot about that. The two reasons why we are doing this are: - o…

In your giant ad you missed the point so much it hurts. You are asking sensitive user names and passwords you have no right to have. Just because you don’t do anything bad with them (that you say - and not yet) means nothing. You shouldn't be asking for them. Phishing attacks do exactly the same thing you do. You are not special, your users shouldn't trust you with their appleid and password anymore than any other sp…

Why does the application that accesses your calendar not have the right to the credentials for those calendars. Does my email application all of a sudden no longer have the right to my email credentials.

The issue here is not that Sunrise asks for your iCloud credentials, which it needs to be able to access your iCloud data, which you as a user of their service have given them the right to. The problem is that those same credentials are tied to your iTunes account and your credit card.

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#76

Post by vvhn »

EpicEng wrote: post #45
coldtea wrote: post #23

Earlier quoted context omitted.

To quote JWZ: "You have invoked the "Oh, but there's a preference to turn off that stupid behavior" defense. I am showering you with negativity." (Yes, it's not a preference pedantically, it's an option to create multiple accounts. Still the default and most used is using one account).

I'm an engineer an I didn't know you could use two accounts for different tasks on the same device. Just never thought about it, because why would I? Not a reasonable workaround, I agree.

if you set up an iOS device, it specifically asks you if you want have a single Apple ID or 2 ids ( one for iTunes/App Store and another one for iCloud/FaceTime/iMessage).

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#77

Post by smackfu »

runjake wrote: post #8
0x0 wrote: post #6

Earlier quoted context omitted.

It's pretty crazy that you need to use the same credentials to "buy" a $0 app as you have to remotely lock and wipe your iphone and mac.

You don't need to at all. I use two separate Apple IDs on my iOS devices. Apple ID accounts are individually configurable for most, if not all iCloud/App Store services.

You can even use multiple accounts on a single iOS device to purchase stuff. So you can "share" apps with someone by logging in as yourself and then downlading the app.

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#78

Post by kuschku »

jaegerpicker wrote: post #69
coob wrote: post #62

Earlier quoted context omitted.

The only stated way they're going to 'revolutionise' calendar storage is by adding rich media? You can hack on EventKit for that - just used the notes or URL properties on EKCalendarItem. Sorry, they're not getting my credentials.

Yeah, I'm not sure what exactly that is trying to justify but off the top of my head I can think of about 1/2 dozen different ways to tie rich media to the calendar entry. iCloud and EventKit have their issues but this just seems way wonky to me.

And even without hacking EventKit you could just base64 the media and add it as description.

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#79

Post by rismay »

objclxt wrote: post #18
way66 wrote: post #15

Hey everybody, Pierre from @sunrise. This is the blog post we've just published to give more context: "Users sometimes ask us why we require the user’s Apple ID and password in Sunrise, instead of using the local Calendar API. That’s a great question to ask, and we understand why users don’t want to share their credentials without context. We’ve thought a lot about that. The two reasons why we are doing this are: - o…

The one rather glaring fly in your ointment is that if your system was as secure as you make it out to be you wouldn't have been asking users to change their iCloud passwords after your database was compromised a few months ago. http://www.theverge.com/2013/11/3/5061136/sunrise-calendar-a...

If you delete the app, this won't remove the account from sunrise's system then?

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#80

Post by Bud »

hayksaakian wrote: post #65
weaksauce wrote: post #52

Earlier quoted context omitted.

It's actually phishing. I bring it up because I see more than one commenter on this page that has it wrong.

it might be autocorrect changing phishing to fishing

Anyone who is relying on autocorrect while posting comments on technical issues kinda deserves what they get.
Post reply on HN