Re:iOS and MacOS Developers Can Now Respond to Reviews
by mikeash on Tuesday January 24, 2017 @07:35PM
(#13477276)
It looks like the API is just a single "requestReview" call, and the UI and submission is handled outside the program's control.
Re:iOS and MacOS Developers Can Now Respond to Reviews
by matheweis on Tuesday January 24, 2017 @07:33PM
(#13477267)
See the Dash fiasco for how complex the issue is and how it is getting some attention at the highest levels of Apple.
We could debate all day (see the other threads) about that particular case, but the bottom line is they're at least aware of potential abuses and working on them.
Re:iOS and MacOS Developers Can Now Respond to Reviews
by arjie on Tuesday January 24, 2017 @07:26PM
(#13477222)
Don't they have a review process? Surely they'd just check all the places you use the new API.
Re:iOS and MacOS Developers Can Now Respond to Reviews
by mhmiles on Tuesday January 24, 2017 @07:32PM
(#13477259)
Yeah I’m pretty sure you’d have to use private APIs to be able to fake reviews using the new controller. They’d probably ban your developer account if you tried this. Don’t think it would be worth it.
Re:iOS and MacOS Developers Can Now Respond to Reviews
by mikeash on Tuesday January 24, 2017 @08:09PM
(#13477497)
They have the ability to run views entirely out of process. I can't guarantee they're doing it here, but I don't think it would be hard for them to make it completely immune even to private API abuse.
For instance, a malicious app could falsify the user data before submitting it using the new API, dark patterns in the feedback form (1 star could be the highest rating), or just omit sending in poor reviews altogether.