Live data from Hacker News

Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

marco.org

91–100 of 110 posts

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#91
post #56

Earlier quoted context omitted.

>> Admittedly, Android does it much better by providing oAuth, an easy way to get the users sign in, and of course APIs for almost all the popular features. First of all this has nothing to do with iOS/Android. This is an app trying to access a web service. Apple needs to provide oath or similar for accessing their iCloud services. >> And also, for installing $0 apps you don't need any credit card details at all. Eve…

That's funny, I just bought a new one and can install things fine without a credit card.

Because it has always been that way. Funny would be Google asking you to setup a 'merchant' account for installing free apps.

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#92

Admittedly, Android does it much better by providing oAuth, an easy way to get the users sign in, and of course APIs for almost all the popular features. And also, for installing $0 apps you don't need any credit card details at all. Even the buttons are different "Install" v/s "Buy".

>> Admittedly, Android does it much better by providing oAuth, an easy way to get the users sign in, and of course APIs for almost all the popular features. First of all this has nothing to do with iOS/Android. This is an app trying to access a web service. Apple needs to provide oath or similar for accessing their iCloud services. >> And also, for installing $0 apps you don't need any credit card details at all. Eve…

[deleted]

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#93

It's actually Apple's fault, they should offer an API for this kind of thing!

It's not Apple's fault. If I ask for your gmail user / pass is that fine because there's no API ?

Except there is an API for Gmail.

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#95

Earlier quoted context omitted.

Why does the application that accesses your calendar not have the right to the credentials for those calendars. Does my email application all of a sudden no longer have the right to my email credentials. The issue here is not that Sunrise asks for your iCloud credentials, which it needs to be able to access your iCloud data, which you as a user of their service have given them the right to. The problem is that those…

Think cloud based. OAuth, if implemented by Apple, would have APPLE asking the users for their username / password combination. APPLE then tells Sunrise that the username / password is valid. There is no reason why Sunrise should ask for the username / password. OAuth and even older, Paypal, use this methodology. It is a shared deficiency between Sunrise and Apple that they don't have a better way of performing user…

I don't think anyone would disagree that OAuth is a far, far better solution. But there's not really anything Sunrise can do to make Apple implement OAuth.

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#96
post #83
post #8

Earlier quoted context omitted.

You don't need to at all. I use two separate Apple IDs on my iOS devices. Apple ID accounts are individually configurable for most, if not all iCloud/App Store services.

If I've been using 1 Apple ID on my devices for the past ~4 years, how do I create two separate accounts without losing data or access to media? Serious Question.

http://support.apple.com/kb/HT4895

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#97

I don't have a huge beef with this, though. I am assuming that Apple has vetted the company and the app already through their normal process of allowing the app in the app store. Am I being overly trusting?

Yes.

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#98
post #15

Hey everybody, Pierre from @sunrise. This is the blog post we've just published to give more context: "Users sometimes ask us why we require the user’s Apple ID and password in Sunrise, instead of using the local Calendar API. That’s a great question to ask, and we understand why users don’t want to share their credentials without context. We’ve thought a lot about that. The two reasons why we are doing this are: - o…

They should have rejected your app until they had an Oauth solution in place. That's the right answer to avoid training Apple users to be fishing targets. Sunrise doesn't have a (known) security problem. Sunrise happened to reveal a glaring problem with Apple's security policies.

Actually, as a poster mentioned above, Sunrise was compromised 3 months ago, and recommended all iCloud users change their passwords.

http://www.theverge.com/2013/11/3/5061136/sunrise-calendar-a...

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#99
post #96
post #83

Earlier quoted context omitted.

If I've been using 1 Apple ID on my devices for the past ~4 years, how do I create two separate accounts without losing data or access to media? Serious Question.

http://support.apple.com/kb/HT4895

That doesn't really seem to transfer existing app purchases between accounts (so updates continue to work etc). It also doesn't mention moving documents&settings&calendars from one icloud to another?

Re: Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password

#100
post #45

Earlier quoted context omitted.

I'm an engineer an I didn't know you could use two accounts for different tasks on the same device. Just never thought about it, because why would I? Not a reasonable workaround, I agree.

> Just never thought about it, because why would I? Anyone with family members using their iTunes account would and has for many years. That's why it's there.

It's there so that you can create a junk account for apps which want access to your credentials? Doubtful. Remember the context of the topic.
Post reply on HN