Live data from Hacker News

Loupe – A iOS app that raises awareness about what native apps can see

github.com

231–240 of 263 posts

Re: Loupe – A iOS app that raises awareness about what native apps can see

#231

Earlier quoted context omitted.

Not going to lie, it would be an absolute hell to develop an app that's actually used without getting crash/analytics.

Surely this could (or should) be facilitated through the app store.

That'd just be kicking up another lawsuit for giving app stores too much control

Re: Loupe – A iOS app that raises awareness about what native apps can see

#232

Earlier quoted context omitted.

You are right, it is BS. Non-multiplayer games, clock, camera, contacts, phone, text message, file explorer, keyboard, launcher, notes, document viewer/editor, image viewer, audio recorder... Most of the apps on my phone do not need internet access.

Every single one of those, except for the games, is a pre-installed built in app. It seems like you just don't use apps.

> is a … app

> you just don't use apps.

An app isn't an "app" if I don't install it?

I have banking "apps" and others which obviously do require internet access to function properly, but the hundreds of flashlight apps in the app store should not need the internet.

The app I use to back up my text messages and contacts does not need internet, but the other app that I use to copy those backup files and pictures off my phone to other computers does.

The sad thing is, even if I take steps to prevent others getting access to my contacts or text messages, sketchy companies will still get those same contacts and quite possibly most of those messages from everyone else.

We need "herd immunity" when it comes to digital privacy, but it's unlikely to ever happen.

Re: Loupe – A iOS app that raises awareness about what native apps can see

#233

I don't understand why internet access isn't opt-in for apps. Preventing exfiltration would prevent much of this harm, and most apps don't have any need to access the internet in the first place. Why am I creating a GE account to read my blood pressure? At least I know it's taking advantage of me. But this is clearly abusive behavior

> most apps don't have any need to access the internet in the first place Citation needed. Looking through my phone the vast majority of third party apps I have installed obviously require internet access: - Social media - Travel (rideshare/airlines/hotels) - Streaming - Finance (credit cards/banks) - Shopping Not counting built-in apps like the calculator I'd estimate 80-90% of the apps I have installed require inte…

[deleted]

Re: Loupe – A iOS app that raises awareness about what native apps can see

#234

I don't understand why internet access isn't opt-in for apps. Preventing exfiltration would prevent much of this harm, and most apps don't have any need to access the internet in the first place. Why am I creating a GE account to read my blood pressure? At least I know it's taking advantage of me. But this is clearly abusive behavior

> most apps don't have any need to access the internet in the first place Citation needed. Looking through my phone the vast majority of third party apps I have installed obviously require internet access: - Social media - Travel (rideshare/airlines/hotels) - Streaming - Finance (credit cards/banks) - Shopping Not counting built-in apps like the calculator I'd estimate 80-90% of the apps I have installed require inte…

I suppose i use a computer for all of this. Do you not get any utility out of your phone beyond being a glorified frontend to a browser? I use it to track my health, to take and organize photos, to document my life in myriad ways, to compose and edit text/video/music, and virtually none of this requires internet beyond icloud syncing/drive.

Re: Loupe – A iOS app that raises awareness about what native apps can see

#235

Earlier quoted context omitted.

...wouldn't it be better to have a pocket computer you own?

if you think "desktop" operating systems aren't even worse on this, you're very mistaken

there i can install linux or compile my own stuff

Re: Loupe – A iOS app that raises awareness about what native apps can see

#237
post #179
post #102

Earlier quoted context omitted.

Yes indeed, the limit is 50 which is of course enough to fully profile "regular people" who only have a handful of apps. Also don't forget, Meta/Google/TikTok/WhateverPalantir are updated weekly which means they can tweak their LSApplicationQueriesSchemes list and cover even more apps if they want to.

Are there legitimate reasons why an App should know I have installed?

Interoperability mainly - if you want to deep link into a specific app or show a list of apps to open.

These days we have more modern and privacy protecting APIs for making content available to the system or other apps… but that doesn’t stop the profilers.

Re: Loupe – A iOS app that raises awareness about what native apps can see

#238
post #184

Earlier quoted context omitted.

E.g if gmail knows that you have maps or chrome it can deep link you into a particular view instead of opening safari.

At the OS level, Android gives me the option to open links in the corresponding app.

So does iOS, but this is a different feature than what we’re discussing here.

Since Android 11, Google copied the iOS model except Android is a bit more permissive and so you get a bit less privacy out of the box.

Re: Loupe – A iOS app that raises awareness about what native apps can see

#239

Earlier quoted context omitted.

100% of users have legitimate reasons to block internet access for some apps. If internet access wasn't granted by default, a lot more apps would function without it. Many other apps wouldn't exist at all, because their only reason to exist is to spy on users.

Not going to lie, it would be an absolute hell to develop an app that's actually used without getting crash/analytics.

Sounds like normal development up until ten years ago. Somehow we managed.

Re: Loupe – A iOS app that raises awareness about what native apps can see

#240

Earlier quoted context omitted.

There is very little IPC that is allowed for apps that do not share a development team on iOS.

> There is very little IPC I am not familiar with iOS internals, but does "very little IPC" mean "zero IPC"? Because if we are talking IPC in the context of bypassing permission checks, I imagine, 'very little' doesn't cut it?

I said "very little" because someone is probably going to be like "oh well you can have app A start allocating a bunch of memory and then app B gets a memory warning and this passes 1 bit of information"
Post reply on HN