It's actually Apple's fault, they should offer an API for this kind of thing!
Well, they do offer an API (CalDAV); they just don't offer an oAuth solution on it.
Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password
81–90 of 110 posts
Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password
#82Earlier quoted context omitted.
The one rather glaring fly in your ointment is that if your system was as secure as you make it out to be you wouldn't have been asking users to change their iCloud passwords after your database was compromised a few months ago. http://www.theverge.com/2013/11/3/5061136/sunrise-calendar-a...
If you delete the app, this won't remove the account from sunrise's system then?
There is no way for app developers to know which users have deleted the app from their device.
Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password
#83Earlier quoted context omitted.
It's pretty crazy that you need to use the same credentials to "buy" a $0 app as you have to remotely lock and wipe your iphone and mac.
You don't need to at all. I use two separate Apple IDs on my iOS devices. Apple ID accounts are individually configurable for most, if not all iCloud/App Store services.
If I've been using 1 Apple ID on my devices for the past ~4 years, how do I create two separate accounts without losing data or access to media?
Serious Question.
Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password
#84Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password
#85Hey everybody, Pierre from @sunrise. This is the blog post we've just published to give more context: "Users sometimes ask us why we require the user’s Apple ID and password in Sunrise, instead of using the local Calendar API. That’s a great question to ask, and we understand why users don’t want to share their credentials without context. We’ve thought a lot about that. The two reasons why we are doing this are: - o…
"We are a team of 7 people building a calendar with love & passion"
Love and passion?
Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password
#86[deleted]
Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password
#87Earlier quoted context omitted.
In your giant ad you missed the point so much it hurts. You are asking sensitive user names and passwords you have no right to have. Just because you don’t do anything bad with them (that you say - and not yet) means nothing. You shouldn't be asking for them. Phishing attacks do exactly the same thing you do. You are not special, your users shouldn't trust you with their appleid and password anymore than any other sp…
Why does the application that accesses your calendar not have the right to the credentials for those calendars. Does my email application all of a sudden no longer have the right to my email credentials. The issue here is not that Sunrise asks for your iCloud credentials, which it needs to be able to access your iCloud data, which you as a user of their service have given them the right to. The problem is that those…
Think cloud based. OAuth, if implemented by Apple, would have APPLE asking the users for their username / password combination. APPLE then tells Sunrise that the username / password is valid. There is no reason why Sunrise should ask for the username / password.
OAuth and even older, Paypal, use this methodology. It is a shared deficiency between Sunrise and Apple that they don't have a better way of performing user authentication.
-----------------
Your email application is a null / void example. Email applications run on your own computer. What is going on here is that Sunrise is collecting usernames / passwords on their own server, and promising that they won't do anything wrong with them. Whether or not we should trust them is beside the point, their approach to security is terrible.
Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password
#88Hey everybody, Pierre from @sunrise. This is the blog post we've just published to give more context: "Users sometimes ask us why we require the user’s Apple ID and password in Sunrise, instead of using the local Calendar API. That’s a great question to ask, and we understand why users don’t want to share their credentials without context. We’ve thought a lot about that. The two reasons why we are doing this are: - o…
"We are a team of 7 people building a calendar with love & passion" Love and passion?
Love and passion.
Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password
#89Admittedly, Android does it much better by providing oAuth, an easy way to get the users sign in, and of course APIs for almost all the popular features. And also, for installing $0 apps you don't need any credit card details at all. Even the buttons are different "Install" v/s "Buy".
>> Admittedly, Android does it much better by providing oAuth, an easy way to get the users sign in, and of course APIs for almost all the popular features. First of all this has nothing to do with iOS/Android. This is an app trying to access a web service. Apple needs to provide oath or similar for accessing their iCloud services. >> And also, for installing $0 apps you don't need any credit card details at all. Eve…
>> First of all this has nothing to do with iOS/Android...
I know it's not. I was just hinting the plus sides of a competitive product, something the new users should know, and something Apple should learn from. It's less about the app, and more about what the app is allowed to do, yet.
>> This is untrue.
No, it's not. You mean Google asked you to setup a "Merchant" account for being a "customer" of $0 apps? ... Think again. :)