31–40 of 226 posts
Good post, but a bit turbulent to read: "If you’ve ever built a web app, then your users will suffer. Remember, it’s a world wide web, including the European Union." "Create a PDF with the following information:" (me, reading that paragraph: '...what? why?') -- [Edit]: I concluded from the bullet-list on why that is requested, but it would help to introduce that intention before instructing me to do something
What is really fun about working with Apple is their Appstore connect platform is buggy & slow as hell. Few times I couldn't submit an app because of it. Every time I submit a bug, there first reaction is try it on safari; most of time it was server issues so it didn't resolve it. But sometimes it actually did where I didnt expect it.
Earlier quoted context omitted.
>> Microsoft does it all the time with Edge on Windows. Edge on windows, the same edge on windows that got caught slurping up chrome tabs recently? Browsers are now the same size code base wise, as operating systems. They are in fact tiny OS's with permissions models and execution environments. I think the author makes the point that safari made a lot of progress, they paid for a lot of work, that they are throwing a…
Aren't apps already sandboxed from eachother on both major Phone OS', unlike on Windows? So on that end something like Edges snooping around other browsers isn't even possible.
The browser is bigger than the OS in total LOC.
No one is auditing that.
It is a question of when the video leaks of someone using their phone on the shitter.
If its a Samsung... well were gonna hear google and Samsung blame each other and consumers will be confused till everyone forgets about it.
If it's an apple, consumers blame apple. The buck stops with them.
You have to make a business decision based on this what are you gonna do? Im gonna lock all the doors I can.
Ah yes, the poor end users suffering and the security being bullshit. I really can't wait to clean the first malicious browser out of a relative's iPhone and try and unsubscribe from Tim Sweeny's app store with his own 30% margin to spend on blackjack and hookers. The new status quo will be worse than the old one.
Somehow this is not a problem on Android even though they have sideloading and alternative app stores even beyond what Apple is going to allow. (Apple still requires apps to go though a review process, even if distributed outside of the App Store, and will enforce this using digital signatures.)
Browsers represent a significant attack surface since they can run code and also transmit data across the network. So when they are allowed to exist now Apple has either two options. One is to do the simple way and remove progressive web apps or extensively test and perform security analysis on all of the new browser engines.
A better compromise would be to make new browser engines have extensive testing by the developer themselves. So, what's the point ? It feels similar to the GDPR where I get a popup and I click disallow all cookies except for essential ones.
This seems the best way to actually implement the directive because it is not only low effort but most secure. We would have a better compromise for testing to be done by the browser engine developer or Apple but its more likely security holes would fall through.
Ah yes, the poor end users suffering and the security being bullshit. I really can't wait to clean the first malicious browser out of a relative's iPhone and try and unsubscribe from Tim Sweeny's app store with his own 30% margin to spend on blackjack and hookers. The new status quo will be worse than the old one.
Somehow this is not a problem on Android even though they have sideloading and alternative app stores even beyond what Apple is going to allow. (Apple still requires apps to go though a review process, even if distributed outside of the App Store, and will enforce this using digital signatures.)
Note I'm mostly an Android user.
A lot of this article appears to be based on the belief that the security architecture of iOS and MacOS are identical. This seems ... an unlikely assumption
Why Safari can’t just launch from a Home Screen bookmark even if the user has chosen another “default browser”? PWAs are already a separate “island” of storage and share nothing with Safari App… Microsoft does it all the time with Edge on Windows.
Perhaps this is just "all we could deliver by the compliance deadline without compromising platform security" ? The truth is usually a lot less interesting than the hypothesis.