Live data from Hacker News

Tell HN: Apple Pay works in non-Safari browsers in iOS 16 Beta 3

news.ycombinator.com

71–80 of 117 posts

Re: Tell HN: Apple Pay works in non-Safari browsers in iOS 16 Beta 3

#71
post #55

Earlier quoted context omitted.

It sounds like you envision a world of many different walled gardens, instead of the single Apple-policed walled garden. I can see how that would be attractive in some ways. On the other hand, parent's aren't necessarily smarter than anyone else. "Install this rando app store and get 12¢ off your next gas fill-up!"

Remember Facebook offering people a few bucks to MITM their entire phone? Oh wait, that was on the official App store! And they didn't even ban them!

>Remember Facebook offering people a few bucks to MITM their entire phone? Oh wait, that was on the official App store! And they didn't even ban them!

No, companies can apply for their own app signing key that allows them to create apps for their own in-house-only uses that completely bypass the App Store.

Facebook used that enterprise signing key to install spyware on user's devices. This had nothing to do with the App Store, and Apple did revoke their signing key as a warning shot.

>“We designed our Enterprise Developer Program solely for the internal distribution of apps within an organization,” the spokesperson said. “Facebook has been using their membership to distribute a data-collecting app to consumers, which is a clear breach of their agreement with Apple. Any developer using their enterprise certificates to distribute apps to consumers will have their certificates revoked, which is what we did in this case to protect our users and their data.”

https://www.cnbc.com/2019/01/30/apple-says-facebook-violated...

Re: Tell HN: Apple Pay works in non-Safari browsers in iOS 16 Beta 3

#72

Probably preparations due to the upcoming EU framework. As a short summary, here are some of the new EU requirements on gatekeepers such as Apple. Gatekeepers must: - Allow users to install apps from third-party app stores and sideload directly from the internet. - Allow developers to offer third-party payment systems in apps and promote offers outside the gatekeeper's platforms. - Allow developers to integrate their…

It seems like every perceived problem these days is grounds for legislation. Let’s work on additive solutions as opposed to regulation.

Re: Tell HN: Apple Pay works in non-Safari browsers in iOS 16 Beta 3

#73

Earlier quoted context omitted.

Stripe's demo doesn't work on desktop Firefox, either. > Either your browser does not support the Payment Request API, or you do not have a saved payment method. To try out the Payment Request Button live demo, switch to one of the supported browsers below, and make sure you have a saved payment method.

Desktop Firefox doesn’t use the Apple WebKit engine on the backend, so that’s up to the Firefox Desktop team to implement on their own (and tie into the OS native if available, which I suspect depends on you running the latest macOS beta, assuming they’re working on it yet). EDIT: Which they’re not, per above.

Apple Pay does not work in non-Safari WebKit browsers on macOS as of Ventura beta 4.

Re: Tell HN: Apple Pay works in non-Safari browsers in iOS 16 Beta 3

#74
post #57

Earlier quoted context omitted.

It's about 100% more likely that it's going lead to every company that chafes under Apple's current "you have to ask permission before you can do that" rules to begin to only offer their apps outside the App Store. Remember the original Android permission model of "an app gets every permission it wants or you can't install it"? That's where this is heading.

I would think a permissions model is something that Apple would still be able to design and enforce through their control of the operating system?

Apple can’t stop malware on macOS

Google can’t stop malware on android

Microsoft can’t stop malware on android

What makes you think Apple will be able to stop malware on iOS?

Re: Tell HN: Apple Pay works in non-Safari browsers in iOS 16 Beta 3

#76
post #57

Earlier quoted context omitted.

I would think a permissions model is something that Apple would still be able to design and enforce through their control of the operating system?

Apple can’t stop malware on macOS Google can’t stop malware on android Microsoft can’t stop malware on android What makes you think Apple will be able to stop malware on iOS?

Malware is definitely possible in various ways, but my understanding is the permission system is still robust. Unless you have given an app a particular permission, with a UI controlled by the operating system, it is unable to use operating system capabilities that are protected by that permission.

For example, the OS can enforce that an app can't use the camera without the user clicking "allow" on an OS-managed pop-up.

Re: Tell HN: Apple Pay works in non-Safari browsers in iOS 16 Beta 3

#77
post #9

Non-Safari browsers on iOS are still Safari's rendering engine, aren't they? I just wish it'd work on Firefox on my Mac. If not that, I'd love a popup that told me the page supports Apple Pay, so I can checkout with Safari instead.

I wish Firefox on the Mac supported Keychain. Chrome does.

Re: Tell HN: Apple Pay works in non-Safari browsers in iOS 16 Beta 3

#79
post #32

Earlier quoted context omitted.

- Give developers access to any hardware feature, such as "near-field communication technology, secure elements and processors, authentication mechanisms, and the software used to control those technologies." Here comes the Meta App Store to bypass all iOS privacy protections :( I really like the idea of an eject button to run arbitrary code and operating systems on my pocket computer, but 99% of the time I want it t…

Why would you download the Meta App store to begin with?

My gut feeling is that there's a nontrivial chance that the moment 3rd-party app stores are available on iOS, Meta will immediately move their apps to one to work around privacy limitations the App Store currently imposes on them.

I also strongly suspect that one of those apps would be WhatsApp, which is an app that a not-insignificant portion of the world uses to communicate. Unfortunately, I don't have a choice in what apps my family around the world uses, so I'm stuck with WhatsApp. The choice for me would either be to cut contact with dozens of family members, or enable the Meta App Store.

My hope is that if Apple is forced to allow 3rd-party app stores, they'll make it possible to even more strictly sandbox apps from those stores somehow.

Post reply on HN