News for hackers. Stuff that matters.

A comment on Apple Pulling High-Grossing Scammy Offer Subscription Apps Off the App Store. Parent comment

Re:Apple Pulling High-Grossing Scammy Offer Subscription App... by madeofpalk on Saturday October 20, 2018 @12:58PM (#18264145)
To be fair, that's _at least_ up to the OS, and iOS does do this. Every in app purchase has to be approved from an OS-provided dialogue that requires hardware interaction to approve.

One problem I have seen from this was an ancestry app that prompted you to scan your fingerprint to "find your relatives", and then would prompt for IAP, which asks for Touch ID approval. Because you already had your thumb on the reader, it would more or less instantly be approved. Unsure if Apple has made any changes around this yet. https://www.reddit.com/r/videos/comments/9bxw0f/this_ancestr...

[ Parent | on HN ]
Re:Apple Pulling High-Grossing Scammy Offer Subscription App... by wool_gather on Saturday October 20, 2018 @02:02PM (#18264533)
Apps don't have access to the actual fingerprint data, though. Presumably they were just using it as a login guard?
[ Parent | on HN ]
Re:Apple Pulling High-Grossing Scammy Offer Subscription App... by jboles on Saturday October 20, 2018 @04:11PM (#18265175)
The issue is not the app getting the fingerprint data, but rather literally baiting your finger onto the reader and then switching to a Touch ID subscription prompt under your finger?
[ Parent | on HN ]
Re:Apple Pulling High-Grossing Scammy Offer Subscription App... by greglindahl on Saturday October 20, 2018 @04:25PM (#18265238)
I'd bet that A/B testing would easily show that they make a lot more money if the users' finger is already on the reader from a recent press.
[ Parent | on HN ]
Re:Apple Pulling High-Grossing Scammy Offer Subscription App... by wool_gather on Saturday October 20, 2018 @04:33PM (#18265279)
No, I understand that, and maybe this is just a tangent, but the parent post seemed to be implying that the app was using the fingerprint itself, and I was trying to get a clarification. (And I'm honestly a little skeptical of the story.)
[ Parent | on HN ]
Re:Apple Pulling High-Grossing Scammy Offer Subscription App... by madeofpalk on Sunday October 21, 2018 @07:03AM (#18267491)
Watch the video. It's a scam app. There's zero actual ancestry finding going on. It's like those scamming 'anti virus' apps for iPhone. The app has zero use for the fingerprint, apart from manipulating you into subscribing to a $100/month in app purchase subscription https://vimeo.com/287737290
[ Parent | on HN ]
Re:Apple Pulling High-Grossing Scammy Offer Subscription App... by wool_gather on Sunday October 21, 2018 @09:59AM (#18267983)
I see, thanks for that extra information.
[ Parent | on HN ]