News for hackers. Stuff that matters.
Re:Apple must open iPadOS to sideloading within 6 months, EU... by neverokay on Tuesday April 30, 2024 @12:36PM (#40212956)
I’ve seen tracking apps that prompt the user to enable a vpn on iOS so all their traffic is routed through them (this was not a vpn app, this was a user tracking app - not malicious. Now imagine a malicious one that doesn’t go through App Store review). The vpn thing on iOS is concerning. The user may not even know or remember they allowed it and it could just be sitting on their phone indefinitely.

I’d like it if Apple restricted VPN access for only App Store approved apps.

Again, it’s not you who I’m concerned about. It’s everyone else. It’s not hard, watch:

here you go dumb teenager, download this crypto app and hit accept on everything and get mining this new alt coin

Boom, vpn enabled and traffic intercepted.

Re:Apple must open iPadOS to sideloading within 6 months, EU... by realusername on Tuesday April 30, 2024 @01:11PM (#40213385)
Even on the web, those are blocked with a malware list, I'm not sure that's the best argument for the appstore.

The contribution of the review here (which this kind of malware would easily pass with a server side trigger anyways) doesn't seem that important.

I don't think Apple should restrict which VPN can go though anyways just because of the privacy issues in a lot of dictatorships, they're aren't the best party to do that and are subject to dubious requests, as seen as in China or Russia.