News for hackers. Stuff that matters.
Re:Suspicious iOS KeePass Client by arepublicadoceu on Sunday May 21, 2023 @10:39AM (#36021360)
How do you attest this without simply trusting the dev or monitoring package data transferred by the app?[1] iOS, differently from Android, doesn’t have a explicit network permission that the user can verify.

All apps have network access by default and there’s nothing you can do about it without jailbreaking.

[1] as many pointed out: open source in iOS is a moot point as there’s no way to verify the binaries.

Re:Suspicious iOS KeePass Client by ssbash on Sunday May 21, 2023 @11:52AM (#36022183)
You are incorrect you can verify network access on iOS. https://support.apple.com/en-us/HT212958
Re:Suspicious iOS KeePass Client by arepublicadoceu on Sunday May 21, 2023 @12:41PM (#36022613)
You’re misunderstanding me. On android you can see if the app have network permission. On iOS privacy report you can see if the app accessed the network.

There’s an important distinction. On the first instance the app can’t access the outside world. On the second you will just know that it did.

Re:Suspicious iOS KeePass Client by miles on Sunday May 21, 2023 @03:19PM (#36023911)
> All apps have network access by default and there’s nothing you can do about it without jailbreaking.

There is another option - buy an iPhone in China:

iOS: Disable WiFi (not just cellular) for specific apps without jailbreaking https://tinyapps.org/blog/202209100700_ios-disable-wifi-per-...

Re:Suspicious iOS KeePass Client by stefandesu on Monday May 22, 2023 @02:19AM (#36028066)
I don't understand how this isn't available everywhere. I would love to block certain apps from ever accessing the internet!