How does that work? If it's open web download and install with no notarization (because that's also gatekeeping) then we're back to the good ol' days of the 90's and early 00's. In other words, anything goes and it's up to the user to keep themselves secure, which in practice means rampant security failures and users getting scammed and hit with ransomware at every turn.
I don't like Apple having so much control over everything. I really preferred the old days of the web and the anything goes, full control over my computers I had back then. But the web is absolutely way nastier today. It's jam packed with scammers and ransomware gangs and botnets. It's really quite sad and frustrating for anyone who grew up with the full potential of computing.
A lot of the solution is just not to install random shit out of app stores, and to install software that has a good reputation (and use adblockers on search engines like google so you don't click on trojan ads).
If you scroll down to the 10th page of the listings for 2048-clone games and install something at random you're probably going to get hacked.
They installed some kind of DNS redirector, so, when he thought he was contacting Apple, he was actually talking to a scammer.
Their customer service was great, which I told him, should have been a red flag.
In any case, he was able to extricate himself from the scammers, but not before they had grabbed a bunch of PiD, so he’s still dealing with the whole identity theft issue.
Not sure how he got owned. Likely, some drive-by malware on a Web site. He basically uses Safari as his operating system.
And the threat surface of the iOS sandbox is so large that it’s impossible to secure everything everywhere the first time. Every iOS jailbreak since at least iOS 10 starts with a sandbox escape exploit and executed via a sideloaded app (besides the single hardware exploit found in recent years, checkm8)
An App Store with a human review process is one tool in the toolbox.
> Permission layer, app runtime heuristics, and fingerprints are a start. They can do this.
I think this is Google’s approach. How’s that been going?
No stores. Web install. Web first class. No "only Safari/webkit engine" limitation.
If Apple is so genius, they can solve malware with all of those engineering minds and dollars they have. They don't need to hind behind a store to do that. The tools and techniques are readily available and accessible for a company of their size and stature.
Permission layer, app runtime heuristics, and fingerprints are a start. They can do this. They just don't want to / have to, because they're currently Gods of the Phone Universe with unfettered and completely unfair control over "their domain".