News for hackers. Stuff that matters.
Re:Facebook testing notification to users about Apple privac... by idreyn on Monday February 01, 2021 @12:48PM (#25991097)
I'm a simple man -- if I see a button with a primary intent color standing between me and my content I've been conditioned to press it, often before I realize what I'm doing or reading the accompanying text. Probably tens of millions of people will do the same here.
Re:Facebook testing notification to users about Apple privac... by Wowfunhappy on Monday February 01, 2021 @12:50PM (#25991118)
Remember though that this doesn't replace Apple's prompt!
Re:Facebook testing notification to users about Apple privac... by idreyn on Monday February 01, 2021 @12:56PM (#25991211)
That's true, I forgot about that. I appreciate that those prompts don't highlight a particular option which tends to force you to read them.

I wonder how often Apple will allow apps to re-request this permission when it's been denied; I have a handful of iOS apps that are constantly asking me to grant permission to see more of my photos, and I wish they'd rate-limit that kind of abuse.

Re:Facebook testing notification to users about Apple privac... by egypturnash on Monday February 01, 2021 @01:12PM (#25991449)
Shit, every time I reboot my iPad it asks for permission to connect to my phone for wifi calling, and I keep on saying "no" and I wish I could just say "never ask this again". It's just as annoying when Apple does it.
Re:Facebook testing notification to users about Apple privac... by metaxis78 on Monday February 01, 2021 @01:51PM (#25991992)
You can disable this feature, it's specifically a thing that you enabled at some point. The reason you're getting prompted is because you indicated that you want it. IIRC it's something to do with the wifi calling settings on your phone, not your ipad.

It IS annoying that their nag box doesn't have a "go to settings" option, at least.

Re:Facebook testing notification to users about Apple privac... by dmitrygr on Monday February 01, 2021 @01:00PM (#25991268)
It actually is. A while ago, someone (i think fb) produced an article that showed that to avoid the issue, they find it is best to show user their own similar screen, and only if the user clicks "yes", show the OS screen (cause for that one you only get one chance). I suspect you're seeing the apps' first "app-made" screen and not the OS one. Look carefully. If so, click yes there, and NO on the OS screen.
Re:Facebook testing notification to users about Apple privac... by idreyn on Monday February 01, 2021 @01:17PM (#25991500)
No doubt FB is preparing to A/B test dozens of variants for maximum "conversion" :)

The dialog I am constantly seeing is this one, which seems to come from the OS: https://i.imgur.com/7JGotq3.png

Now that iOS allows you to share only some photos with apps (which is great) I see this before practically every photo selection dialog in third-party apps. My choice here doesn't affect my ability to share a single image with the app in that moment; they just want to suck my whole library of photos in for background processing. I'd very much like to not see this dialog more than once a month.

Re:Facebook testing notification to users about Apple privac... by 0bit on Monday February 01, 2021 @04:05PM (#25993943)
Go to Settings, scroll down to find the app, and select it. Then you get the "Allow <app> to access" and a list of entitlements, one of which is "Photos". Select "Photos" and you get three options "Selected Photos" (which is what you likely have), "All Photos", and "None". Push "None" and you should never see that dialog again.
Re:Facebook testing notification to users about Apple privac... by ryandrake on Monday February 01, 2021 @01:14PM (#25991462)
Similar theory behind those “do you like this app” prompts that come from the app itself. If you tap “yes” they’ll give you the prompt to rate on the AppStore. If you tap “no” they won’t. This can seriously inflate an app’s rating and help prevent low ratings. Nice, underhanded and effective dark pattern!
Re:Facebook testing notification to users about Apple privac... by Aulig on Monday February 01, 2021 @01:18PM (#25991519)
This is called review gating and isn't allowed: https://appradar.com/blog/ask-users-leave-review-in-app-stor...
Re:Facebook testing notification to users about Apple privac... by allenu on Monday February 01, 2021 @01:44PM (#25991864)
Is it actually explicitly disallowed in Apple's guidelines? Their wording almost makes it indicate they want you to only ask for a rating when people are happy with the app:

    https://developer.apple.com/app-store/ratings-and-reviews/
    Make the request when users are most likely to feel satisfaction with your app, such as when they’ve completed an action, level, or task.
Re:Facebook testing notification to users about Apple privac... by another-dave on Monday February 01, 2021 @04:51PM (#25994503)
I understood that to mean, if you've goals within you app (e.g. CityMapper — completing a journey; Dropbox — uploading a file; some game — beating a level), ask after the user has completed them, rather than what apps used to do (e.g. before you've been created an account, or getting in your way while you're changing some setting). But when they _do_ ask theyre meant to show the rating dialog either way, not first check what rating you would give.
Re:Facebook testing notification to users about Apple privac... by ryandrake on Monday February 01, 2021 @01:35PM (#25991748)
Interesting! It’s obviously been a while since I was in the 3rd party app business because in my day, the use of these was widespread! Nice to see the vulnerability was closed.
Re:Facebook testing notification to users about Apple privac... by mr_toad on Monday February 01, 2021 @08:50PM (#25996599)
Nike Run Club did this to me just last week. The no button leads to a feedback form, the yes button to the App Store.
Re:Facebook testing notification to users about Apple privac... by Aulig on Tuesday February 02, 2021 @02:31AM (#25998236)
Unfortunately it's still widespread, as the rating dialog shouldn't come up during the app review process. So it's unlikely to get caught without being reported.
Re:Facebook testing notification to users about Apple privac... by InitialLastName on Monday February 01, 2021 @01:32PM (#25991712)
The funny thing is when they do that, you leave a bad review, they delete your review, and then keep begging you to leave a review.
Re:Facebook testing notification to users about Apple privac... by jb1991 on Tuesday February 02, 2021 @02:15AM (#25998161)
What App Store allows the developer to delete a negative review? That sounds terrible. Apple’s app store doesn’t allow that.
Re:Facebook testing notification to users about Apple privac... by roblabla on Monday February 01, 2021 @01:12PM (#25991447)
Wouldn't this be against the Apple TOS? Might want to report application that are using this kind of dark pattern.
Re:Facebook testing notification to users about Apple privac... by hobofan on Monday February 01, 2021 @01:39PM (#25991809)
If the notification consent prompt on iOS is any indication, it will only be shown the first time it is requested, which is the reason these notification requests usually already have a "testing screen" like the one described in the article.
Re:Facebook testing notification to users about Apple privac... by godelski on Monday February 01, 2021 @01:54PM (#25992037)
While I agree with your point about this and that most people will do this it really brings up a lot of questions about what consent actually means. Especially with dark patterns and asymmetric information.
Re:Facebook testing notification to users about Apple privac... by asddubs on Monday February 01, 2021 @02:54PM (#25992901)
used to be like this but these days there's so many dark patterns that try to make you pay for extra shit (or sign up for prime), i instinctively look for the non highlighted button if the button stands out a little too much
Re:Facebook testing notification to users about Apple privac... by MaxBarraclough on Monday February 01, 2021 @03:00PM (#25992978)
Same here. If I understand correctly, the GDPR states that if the user is tricked into clicking that they give consent, that doesn't count as them truly giving consent. Despite this, many otherwise reputable websites try to deceive you into 'agreeing'. Disappointingly, TomsHardware is one such.

These dark patterns will only go away once there are properly enforced laws against them.

Re:Facebook testing notification to users about Apple privac... by smhg on Monday February 01, 2021 @01:59PM (#25992131)
> if I see a button with a primary intent color standing between me and my content I've been conditioned to press it

While cookie-laws have good intentions, this side effect should have been properly researched first. An internet full of shady and useless pop-ups which drive this behavior makes me sad. I'm still hoping they will someday disappear.

Re:Facebook testing notification to users about Apple privac... by tgsovlerkhgsel on Monday February 01, 2021 @10:53PM (#25997280)
The intent has been that there would be two equally available buttons.

Regulators just hadn't understood yet that you have to make that explicit, then hire some people to find the loopholes and make it more explicit. Down to prescribing font sizes and colors, or even a standardized dialog.

Of course, mandating compliance with DNT (or a new header) would be better.

And then you need actual enforcement, because when the compliant players see themselves get screwed out of ad revenue by everyone else ignoring the law and nothing happening to them... they can't stay compliant, and they won't.

Re:Facebook testing notification to users about Apple privac... by jakear on Monday February 01, 2021 @03:47PM (#25993683)
The skeptic in me bets that side effect was quite thoroughly researched, by the media companies, who found by normalizing intrusive banners they could get users to agree to whatever they heck they’d want.
Re:Facebook testing notification to users about Apple privac... by vincentmarle on Monday February 01, 2021 @01:58PM (#25992099)
True but looking at my own iTunes App Analytics dashboard for example, about 50% of users don’t opt-in to share analytics with us.

At Facebook-scale 50% means at least a billion users will still opt-in, but probably significantly less than what they were tracking before at the 100% level.

Re:Facebook testing notification to users about Apple privac... by mqus on Monday February 01, 2021 @05:37PM (#25995089)
I propably already learned the "don't klick the obvious button asap" lesson pretty early, when websites had like 5 "Download now" buttons (ads) and you had to search for the small text with a link to actually get the download.
Re:Facebook testing notification to users about Apple privac... by rickdeveloper on Monday February 01, 2021 @01:50PM (#25991968)
What do you think about a 10s delay (or whatever an appropriate reading time is) before the buttons become active?
Re:Facebook testing notification to users about Apple privac... by tgsovlerkhgsel on Monday February 01, 2021 @10:54PM (#25997285)
You want to make the web even worse?

Instead, mandate a standardized header to communicate the intent, as most users have the same intent on all sites.

Show a cookie popup to a user who already said no via the header? That's a fine. Do it again? There goes 2% of your annual revenue.

Re:Facebook testing notification to users about Apple privac... by TeMPOraL on Monday February 01, 2021 @06:05PM (#25995369)
That's so true. Even though I consider myself privacy conscious, and hate all forms of surveillance capitalism, if there's something I need to read ASAP and I'm in a hurry, and the only thing between me and the content is a GDPR form, you can bet your top dollar I'll click "Accept all" without thinking, just to get the popup out of my face.

(Which is also why I'm strongly in favor of more aggressive fining for GDPR violations. "Accept all" shouldn't be the easiest choice on a website.)

Re:Facebook testing notification to users about Apple privac... by Illniyar on Monday February 01, 2021 @12:52PM (#25991140)
I assume the button will prompt a system alert of some kind, no?
Re:Facebook testing notification to users about Apple privac... by MonAlternatiu on Monday February 01, 2021 @12:58PM (#25991244)
The article has precisely that prompt in one of the images.

The thing is, just like certain apps require certain permissions (camera app wants to access the camera, device files, etc..) I believe a lot of people will just accept these conditions without realizing they are completely optional.

Re:Facebook testing notification to users about Apple privac... by Illniyar on Monday February 01, 2021 @01:30PM (#25991682)
A lot of people will.

But there's also strong education regarding system prompts. Users know when an app is asking for extra permissions (which this is basically the same of). Those people who care about what permissions apps have will know what to click.

Those who don't care, that's the most you can do. Besides even Facebook estimate that only 10-30% will click allow. I'm not sure if you can ask for more at this point.

Re:Facebook testing notification to users about Apple privac... by MonAlternatiu on Monday February 01, 2021 @01:47PM (#25991917)
It would be awesome if the users were forced to navigate a settings menu, find the app on a list of apps, and manually enable the option.

One can only dream.