News for hackers. Stuff that matters.
Re:I fear App Review is getting too powerful (2015) [pdf] by Hamuko on Monday August 17, 2020 @03:46PM (#24191133)
>I actually think it’s about keeping iDevices safe.

How are Hey or xCloud about keeping iDevices safe?

Re:I fear App Review is getting too powerful (2015) [pdf] by richardwhiuk on Monday August 17, 2020 @04:45PM (#24191825)
xCloud deliberately avoids the app review process AIUI by allowing it to be an umbrella for any game.
Re:I fear App Review is getting too powerful (2015) [pdf] by Hamuko on Monday August 17, 2020 @04:51PM (#24191910)
Yeah, but the technology used for all of the games is the same isn't it? It's just streaming.

And if it's about content, I doube Apple is pre-approving every Netflix show. I bet some of the offerings on Netflix even show female nipples.

https://www.businessinsider.com/why-instagram-bans-freetheni...

Re:I fear App Review is getting too powerful (2015) [pdf] by crysin on Monday August 17, 2020 @05:00PM (#24192035)
The Witcher shows a lot of nipple
Re:I fear App Review is getting too powerful (2015) [pdf] by viro on Monday August 17, 2020 @05:02PM (#24192059)
are you really comparing video to executable code?
Re:I fear App Review is getting too powerful (2015) [pdf] by detaro on Monday August 17, 2020 @05:09PM (#24192132)
What executable code? The executable code running on Microsofts servers?
Re:I fear App Review is getting too powerful (2015) [pdf] by Hamuko on Monday August 17, 2020 @05:08PM (#24192121)
Am I comparing streaming video to streaming video? Why yes, I am.
Re:I fear App Review is getting too powerful (2015) [pdf] by zepto on Monday August 17, 2020 @08:33PM (#24194016)
You keep repeating this, but at this point it’s hard to imagine that you really see no difference in either the technology or the experience between what Netflix does and what xCloud does.

Do you really not see that there is a difference between watching a movie, and controlling a remote video console which is playing a fully interactive video game?

Re:I fear App Review is getting too powerful (2015) [pdf] by jolux on Monday August 17, 2020 @11:36PM (#24195005)
There’s a difference but it’s relatively pedantic. Netflix has interactive shows and the play/pause is necessarily controlling a remote server as well.
Re:I fear App Review is getting too powerful (2015) [pdf] by zepto on Tuesday August 18, 2020 @12:50AM (#24195374)
It’s not pedantic to say that movies and videogames are different.

Most people in the world would think you insane if you said you perceived them to be the same thing.

Re:I fear App Review is getting too powerful (2015) [pdf] by jolux on Tuesday August 18, 2020 @01:45AM (#24195661)
You’re misreading me. I’m saying that the technological distinction does not justify the policy distinction. I don’t at all believe they’re the same thing.

The comments you’re replying to suggest that executables are being streamed or something, and they’re not.

Re:I fear App Review is getting too powerful (2015) [pdf] by jolux on Monday August 17, 2020 @05:09PM (#24192131)
It doesn’t download executables, it streams your inputs to a server which streams synced AV back.
Re:I fear App Review is getting too powerful (2015) [pdf] by zepto on Monday August 17, 2020 @04:59PM (#24192022)
Apps and videos pose different security risks, but I assume you know this.
Re:I fear App Review is getting too powerful (2015) [pdf] by Hamuko on Monday August 17, 2020 @05:05PM (#24192093)
Do you think xCloud copies a binary executable of Halo Infinite on every Android and iOS device?
Re:I fear App Review is getting too powerful (2015) [pdf] by zepto on Monday August 17, 2020 @05:12PM (#24192180)
Do you think it’s possible to enter a credit card number into a steaming video of ‘friends’?

A steaming app (game or not) can pop up a fraudulent credit card payment interface at any time.

Re:I fear App Review is getting too powerful (2015) [pdf] by Hamuko on Monday August 17, 2020 @05:14PM (#24192190)
I don't see the point you are making.

If video streaming is so bad, Netflix should not be on the App Store for "iDevice security". If video game streaming is so bad, Twitch should not be on the App Store for "iDevice security".

Re:I fear App Review is getting too powerful (2015) [pdf] by zimpenfish on Monday August 17, 2020 @05:36PM (#24192466)
> If video game streaming is so bad

It's not just streaming, it's interactive streaming where it could well happen that PayToWin / LootBox / etc games can appear.

Now, of course, they already exist on the App Store (and I honestly wish Apple would ban them outright) but there, at least, Apple has some kind of leverage - with xCloud, they have none.

Re:I fear App Review is getting too powerful (2015) [pdf] by jonny_eh on Monday August 17, 2020 @05:58PM (#24192697)
Netflix offers "interactive movies", and those are apparently ok, for some reason.
Re:I fear App Review is getting too powerful (2015) [pdf] by zepto on Monday August 17, 2020 @08:30PM (#24194000)
That’s a fair point. At some point far down the road of complexity, those could cross into the territory of ‘gaming’.

But Netflix can read the same rules the rest of us can, and know that they signed a contract that doesn’t allow App storefronts.

Re:I fear App Review is getting too powerful (2015) [pdf] by seslaire on Monday August 17, 2020 @05:52PM (#24192633)
What capabilities would the streamed app have for deception that a website lacks?
Re:I fear App Review is getting too powerful (2015) [pdf] by zepto on Monday August 17, 2020 @08:26PM (#24193968)
None. That’s the point. Both can deceive you in ways that App Store Apps cannot.

One reason people spend so much money in the App Store is because it is relatively safe to do so.

Re:I fear App Review is getting too powerful (2015) [pdf] by seslaire on Tuesday August 18, 2020 @05:52AM (#24196879)
But then why are browsers allowed in the App Store?
Re:I fear App Review is getting too powerful (2015) [pdf] by zepto on Monday August 17, 2020 @04:57PM (#24191991)
The mechanisms used by Hey and xCloud would clearly be used by less trustworthy companies for nefarious purposes.

Hey was able to alter their app trivially to comply with the guidelines, so it actually represents nothing at all here.

xCloud can’t be altered to comply, but nevertheless if app steaming were allowed in general, all of App review could be bypassed by bad actors.

Re:I fear App Review is getting too powerful (2015) [pdf] by DaiPlusPlus on Monday August 17, 2020 @05:17PM (#24192246)
> The mechanisms used by Hey and xCloud would clearly be used by less trustworthy companies for nefarious purposes.

Sorry but no.

What mechanism was “Hey” using that could possibly be abused by a malicious app or malicious app author?

If “Hey” advertised themselves as B2B without any self-service option then Apple, by their own words, would have let the app on the store. Being B2C or having self-service (even if the self-service is outside of the app!) means Apple requires you to have a sign-up form in the app - and if you take punters’ money then that means you need to use IAP and so give Apple their 30% rent. The outrage isn’t over this requirement itself, but because Apple arbitrarily carved-out undocumented exceptions for Netflix, Amazon Kindle, and other “reader” apps even though they’re B2C and self-service - which we can tell is because Apple would get into a worse spat and lose public opinion if they tried to pull Netflix or Amazon’s apps for the same reason.

Re:I fear App Review is getting too powerful (2015) [pdf] by zepto on Monday August 17, 2020 @06:39PM (#24193092)
They aren’t undocumented carve outs. Anyone can produce a reader app.
Re:I fear App Review is getting too powerful (2015) [pdf] by DaiPlusPlus on Monday August 17, 2020 @07:29PM (#24193521)
Anyone can make a B2C reader app, but those reader-apps must have built-in self-service sign-up, including accepting payment through Apple. There is no way around that unless you offer a free tier and never prompt your users to upgrade or tell them that they can upgrade through their web-browser. Logically this extends to free-trials-without-payment-details because when the free trial ends what are you supposed to display in the app?

Netflix, Kindle and others are exempted from the self-service sign-up requirement because Apple knows they can’t win a PR fight against them. Spotify has self-service sign-up in the app, but that’s because they’ve always had a free tier, where’s there’s no free/gratis membership tier for Netflix or Kindle.

If you try it yourself right now Apple will require you to have a self-service signup flow in your app, which is only viable if you have a free tier - otherwise you’ll have to pay the 30% rent or let your iOS users use your service for free indefinitely because you can’t put up a “your free trial has ended” message.

Re:I fear App Review is getting too powerful (2015) [pdf] by ponker on Monday August 17, 2020 @06:21PM (#24192933)
If the app review process is supposed to ban objectionable content then why is Netflix allowed? What stops Netflix from putting bestiality porn on their service (and thus onto iDevices) any more than Microsoft putting objectionable games on xCloud? Simply, because Apple knows that iPhones are commercially unviable without Netflix.

Don’t accept the bullshit Apple offers for the App Store. It has always been about the benjamins, and to over a trillion dollars of success.

Re:I fear App Review is getting too powerful (2015) [pdf] by fomine3 on Monday August 17, 2020 @09:44PM (#24194468)
AppStore guideline is too arbitrary for Apple.
Re:I fear App Review is getting too powerful (2015) [pdf] by zepto on Monday August 17, 2020 @06:49PM (#24193187)
It’s not just about objectionable content - it’s also about fraud.

Apps can be used for fraud in ways that video cannot.

Re:I fear App Review is getting too powerful (2015) [pdf] by fomine3 on Monday August 17, 2020 @09:42PM (#24194455)
So Safari is top attack surface, why don't they ban Safari?
Re:I fear App Review is getting too powerful (2015) [pdf] by zepto on Monday August 17, 2020 @09:54PM (#24194511)
Because people know the difference between websites and apps.
Re:I fear App Review is getting too powerful (2015) [pdf] by 8note on Tuesday August 18, 2020 @03:14AM (#24196045)
Are there actually differences between websites and apps?

It's just some code you got off the internet and run on your phone

Re:I fear App Review is getting too powerful (2015) [pdf] by zepto on Tuesday August 18, 2020 @10:23AM (#24198894)
Two differences seem relevant here. Apps are reviewed by Apple, and are only able to use certain payment mechanisms.
Re:I fear App Review is getting too powerful (2015) [pdf] by ponker on Monday August 17, 2020 @10:31PM (#24194689)
You’re giving the same answers that Apple Marketing would.
Re:I fear App Review is getting too powerful (2015) [pdf] by zepto on Tuesday August 18, 2020 @12:47AM (#24195364)
Do you think it isn’t true? You seem to be just deflecting.
Re:I fear App Review is getting too powerful (2015) [pdf] by ponker on Tuesday August 18, 2020 @03:28AM (#24196112)
I do not think it's true that Apple's decision to ban Microsoft's xCloud is to protect their customers from games that are actually trying to defraud players. If this is deflecting then I guess call me the Great Deflector.
Re:I fear App Review is getting too powerful (2015) [pdf] by zepto on Tuesday August 18, 2020 @10:19AM (#24198848)
Do you think it’s true that users can tell the difference between Apps and Websites?

That’s the question you replied to without answering before.

Re:I fear App Review is getting too powerful (2015) [pdf] by ponker on Tuesday August 18, 2020 @11:57AM (#24200252)
Yes, I think they can tell the difference, but I don’t think that they’re somehow in an unguarded / safer frame of mind in apps, especially with how iOS will immediately transfer you to native apps. It’s an extraordinary claim by Apple that would need extraordinary evidence before I believed it.
Re:I fear App Review is getting too powerful (2015) [pdf] by zepto on Tuesday August 18, 2020 @03:17PM (#24203060)
It’s a ordinary claim, completely supported by the often quoted point that people are much more willing to spend money on iOS than Android or the web.