News for hackers. Stuff that matters.
Re:We launched an app with $500k annual revenue, and then Ap... by busymom0 on Monday June 17, 2019 @04:28PM (#20206996)
This is some super click bait and borderline deceitful blog. Apps on iOS are sandboxed so you can't access data about other app's launch and usage. These apps were using MDM profiles to get that usage data. This also meant that the user's internet data was going through these third parties which is a pretty big privacy issue. Plus having MDM profiles gave these third parties enormous access to the user's device settings. It would allow all your children's phone data as well as device settings to be accessible to these 3rd parties. That's bad, exploitative of underage kids, against the TOS as well as using MDM profiles for wrong intentions. Using MDM profiles are only intended to be used for controlling employee and VPN access for filtering apps within an organization/company. They are not to be used for this purpose and as per the guidelines not to be used for consumer products. Same reason why Facebook's certificates was blocked because they were abusing the MDM profile for different purposes. This was clearly against Apple's policies and against the terms of developer agreement.

The author claiming it's because Apple is trying to eliminate competition forgot to mention any of the above very important reasons. They also forgot to mention that what they were doing was clearly against the app store guidelines which they had agreed to.

Looks like Apple released this info in a press release. NYT's poor journalism got called out too:

https://www.apple.com/newsroom/2019/04/the-facts-about-paren...

One could argue that Apple should provide an API which lets developers access to this data. Apple might be working on that or maybe they won't because Apple has a strict "privacy" policy and providing such sensitive data can be prone to being used by bad actors.

Re:We launched an app with $500k annual revenue, and then Ap... by teh_klev on Monday June 17, 2019 @04:46PM (#20207194)
You'd think that, as reasonably smart people, you might stop and ask questions such as:

- Is this permitted within Apple's T&C's?

- What are the privacy issues? More so if I'm not fully informing my users we're intercepting their data via VPN (I don't know if that's made clear via author's T&C's or during installation)

- Even if all of the above were not concerns, am I able to properly secure user's data (against say state actors)

....even before going ahead and developing an app such as this.

Re:We launched an app with $500k annual revenue, and then Ap... by dwild on Tuesday June 18, 2019 @11:23AM (#20214098)
> - Even if all of the above were not concerns, am I able to properly secure user's data (against say state actors)

Operating a VPN isn't any different than an ISP. Should that be a concerns for ISP too?

Most traffic nowadays is over HTTPS either way, so if that was even a concern, the ISP or VPN wouldn't be the cause of it, but the actual communication in itself.

Re:We launched an app with $500k annual revenue, and then Ap... by mirimir on Monday June 17, 2019 @04:57PM (#20207295)
Yeah, that jumped out at me too.

> We could set up a VPN service and analyze the traffic passing through our servers to learn which social media services mobile devices were communicating with, and using this data we could estimate the time spent on different services and block access to them when users exceeded their self-determined limits.

I mean, I use VPN services all the time. But doing that for an app to track social media usage? That's at least crazy, and arguably deceptive.

Re:We launched an app with $500k annual revenue, and then Ap... by em-bee on Monday June 17, 2019 @11:50PM (#20209637)
if it's done with the express consent of the user and the data is not sold, i don't see the problem. it's only a matter of who i trust with my usage data. if it's not the vpn, then it's my isp.

but, wouldn't a local 'fake' vpn be enough to capture all that locally on the phone? there is no need to send traffic to a remote server for this purpose. or does apple not allow that? it works fine on android.

Re:We launched an app with $500k annual revenue, and then Ap... by tmikaeld on Tuesday June 18, 2019 @01:17AM (#20209987)
iOS doesn't allow it, it's much more restrictive than Android when it comes to sandboxing. There's also no shared storage between apps, on iOS your have to transfer files from app to app.
Re:We launched an app with $500k annual revenue, and then Ap... by larkeith on Monday June 17, 2019 @05:02PM (#20207359)
It's especially weird to claim Apple is eliminating competition when it's replacing subscription-based apps (from which Apple gets a significant portion of the revenue) with a free feature. What are Apple supposed to be competing with, themselves?
Re:We launched an app with $500k annual revenue, and then Ap... by wysifnwyg on Monday June 17, 2019 @04:50PM (#20207241)
I don't think I saw MDM mentioned anywhere on this blog. Yet, it's that key detail that made all the difference. I know there's a lot of functions that Apple restricts developers from accessing, but it's usually for a good reason.
Re:We launched an app with $500k annual revenue, and then Ap... by busymom0 on Monday June 17, 2019 @05:00PM (#20207334)
Yea, same way as the original hit piece written by NYT few months ago didn't even have a single mention of VPN or MDM.
Re:We launched an app with $500k annual revenue, and then Ap... by kushan2020 on Monday June 17, 2019 @04:46PM (#20207195)
It is funny how you assume Apple is first party and it gets to decide who is trustworthy or not. It might be better at privacy when compared to other companies, but a for profit company can never be fair or even correct when making such decisions on privacy.
Re:We launched an app with $500k annual revenue, and then Ap... by busymom0 on Monday June 17, 2019 @04:56PM (#20207286)
I am still willing to accept Apple's stance on privacy proven by their track record over some no reputation company which claims they got the idea from Onava (an app bought by Facebook to track users).
Re:We launched an app with $500k annual revenue, and then Ap... by justaguyhere on Monday June 17, 2019 @04:56PM (#20207291)
It is all relative. Maybe neither Apple nor this company is trust worthy, but there is a reasonable expectation on users part to expect Apple to protect their privacy (after all, users pay crap ton of money for their iPhones) more than a tiny, unknown company.
Re:We launched an app with $500k annual revenue, and then Ap... by chronial on Monday June 17, 2019 @05:05PM (#20207373)
My understanding is that they were providing a VPN that did the tracking and blocking, without gaining any access to the actual device. I don't see how this article is related to MDM profiles or Apple's press release.

Am I missing something?

Re:We launched an app with $500k annual revenue, and then Ap... by scarface74 on Monday June 17, 2019 @08:18PM (#20208646)
One of the points was that it was designed to stop you from “opening an app” based on certain criteria. The only way you can do that is with MDM on iOS.
Re:We launched an app with $500k annual revenue, and then Ap... by chronial on Tuesday June 18, 2019 @04:26AM (#20210679)
I am confused by your use of quotation marks. That phrase is not contained in the article. You might be referring to this sentence?

> In addition to tracking the time spent on social media apps, we needed to implement the feature to block those apps when the user reached the configured time limit.

But "block those apps" is a perfectly sensible description of "blocking tcp certain connections at VPN level" and thus a very different statement to "stop you from opening an app".

Please actually check what was said before you pretend to quote someone.

Re:We launched an app with $500k annual revenue, and then Ap... by scarface74 on Tuesday June 18, 2019 @06:03AM (#20211237)
In the screenshot of the notes app one of the bullet points said “....don’t allow me to open Facebook more than 5 times a day”
Re:We launched an app with $500k annual revenue, and then Ap... by Causality1 on Monday June 17, 2019 @04:48PM (#20207218)
Bingo. There are several examples from years back where Apple copied an app and then removed it from the app store, but this isn't one of those times.
Re:We launched an app with $500k annual revenue, and then Ap... by scarface74 on Monday June 17, 2019 @06:15PM (#20207893)
So you care to give such an example?
Re:We launched an app with $500k annual revenue, and then Ap... by Causality1 on Monday June 17, 2019 @07:57PM (#20208520)
Camera+ and its VolumeSnap feature, f.lux and the Night Shift feature, Finder for locating your Air Pods, Coolpixel and screen recording. All of these apps offered features that were later integrated into iOS or other Apple offerings. Apple went so far as to send a demand letter to the f.lux devs demanding they stop offering the app for sideloading.
Re:We launched an app with $500k annual revenue, and then Ap... by berbec on Tuesday June 18, 2019 @12:54AM (#20209893)
Hell, go back to the early jailbreaking days - Clippy before apple had cut & paste, SwirlyMMS for picture messaging. Apple's been stealing idea for ages.
Re:We launched an app with $500k annual revenue, and then Ap... by scarface74 on Tuesday June 18, 2019 @06:18AM (#20211340)
Really? Apple “stole” the idea of cut copy and paste? That was a criticism from day one on the phone. The other was not supporting MMS.
Re:We launched an app with $500k annual revenue, and then Ap... by Causality1 on Tuesday June 18, 2019 @11:28AM (#20214159)
It doesn't seem to have been obvious to Apple, considering it took them two full years after the iPhone's launch to implement the feature.
Re:We launched an app with $500k annual revenue, and then Ap... by scarface74 on Tuesday June 18, 2019 @12:00PM (#20214542)
Well. You can go back and listen to podcast interviews by some of the early iPhone developers and they will tell you that they were thinking about that from day one.

But to think Apple - the company that had implemented copy and paste on Macs 23 years before then wasn’t thinking about copy and paste until they saw it on jailbroken phones is silly.

It’s equally crazy thinking that Apple didn’t think about implementing a standard phone feature until they saw in the jail broken apps.

Re:We launched an app with $500k annual revenue, and then Ap... by berbec on Tuesday June 18, 2019 @11:51AM (#20214437)
And tried to make a compelling argument that MMS is passé. Everyone who needs MMS should use email instead.
Re:We launched an app with $500k annual revenue, and then Ap... by scarface74 on Tuesday June 18, 2019 @12:56PM (#20215206)
Jobs also said that no one would want an iPod with video two years before Apple introduced one or an iPod + phone.

He also said that you could make great apps by using the web. Until they turned around and introduced a native SDK nine months later....

Are you now going to say they “stole” the idea of an App Store from the few developers who were putting apps on jailbroken iPhones between July 2007 and April 2008?