News for hackers. Stuff that matters.
Re:iPhone Privacy by mikedouglas on Saturday December 05, 2009 @10:54AM (#978152)
The Android system of notifying the user exactly which APIs are being used by an app, prior to install, seems like a step in the right direction.

The talk mentions that class unmarshalling, encrypted payloads, and other tricks that make this a very hard problem. The truth is that code-based analysis can only go so far, especially when what you're looking for will be deliberately obfuscated. The legal barriers that mechanical_fish brought up are probably far more effective.

Re:iPhone Privacy by DenisM on Saturday December 05, 2009 @01:16PM (#978339)
There is no need to analysis - simply demand the app declare what it plans to use and then deny all other APIs at runtime.