News for hackers. Stuff that matters.

egocentric

Announcement and link to the new form: https://developer.apple.com/news/?id=dovxb62h

Please use it, and help make the App Store better for everyone!

Of note, the ability for users to report apps from their App Store page was removed years ago, and remains unavailable:

https://twitter.com/keleftheriou/status/1381002562782908417?...

My point is for that to also be in the downloaded app, since the new rule requires account creation and deletion to both be in the same place - which I think is a natural place to look for it as a user, savvy or not.
“If your app supports account creation, you must also offer account deletion within the app.”

Separately, they should also do this for subscriptions.

Now do subscriptions.

For all the people who fall prey to misleading tactics and don’t know how to cancel.

Re:Rant: iOS App Store search is awful (2018) on Monday June 07, 2021 @12:45PM (#27424730)
Apple employee:

> the Files app was manually boosted on the top for the query “Dropbox”

Whoops!

Some relevant Apple marketing statements [1]:

"The apps you love. From a place you can trust."

"For over a decade, the App Store has proved to be a safe and trusted place to discover and download apps."

"Every day, moderators review worldwide App Store charts for quality and accuracy.”

"Dedicated to trust and safety.”

"Apps must adhere to our guidelines.”

"From more videos to rankings and reviews, there are loads of ways to help you pick the app that’s right for you.”

"ensuring that the apps we offer are held to the highest standards for privacy, security, and content. Because we offer nearly two million apps — and we want you to feel good about using every single one of them."

"When you download an app, it should work as promised. Which is why human App Reviewers ensure that the apps on the App Store adhere to our strict app review standards. Our App Store Review Guidelines require apps to be safe, provide a good user experience, comply with our privacy rules, secure devices from malware and threats, and use approved business models."

1: https://www.apple.com/app-store

What is not?
You’d think!

This is not just possible, it's actually extremely easy to do.

Hoping to share a proof of concept soon.

If you could please elaborate, what did the tweet say and who exactly was it by?
I’d love to know more about this, mind sharing some more details over DM? Thanks! https://twitter.com/keleftheriou
Android and Windows devices don’t necessarily have the same OS-level security provisions, so this isn’t an apples-to-apples comparison. It’s probably true that iOS as an operating system has had stronger security from the start, but that’s not related to the app distribution channel.
If Apple is so concerned about user security & privacy when it comes to alternative app stores, they should adjust their policies so that the apps most users want will see no reason not to be on the App Store.
Apple doesn’t let developers tell their users what Apple’s rules are, including the fact that up to 30% of their payment goes straight to Apple.

And of course people don’t know of all the good apps that never get to be on the App Store because of unwarranted rejections.

So people generally have no idea about most of the problems with the status quo.

Your parents and non-techie friends and family won’t have to use alternative stores, no one will be forcing them to.

And if Apple is so concerned about user security & privacy when it comes to alternative app stores, they should adjust their policies so that the apps most users want will see no reason not to be on the App Store.

You will also have a choice: don’t use alternative stores

And if Apple is so concerned about user security & privacy when it comes to alternative app stores, they should adjust their policies so that the apps most users want will see no reason not to be on the App Store.

That's because of system-level protections like the sandbox, not App Review or the App Store.
Thank you for being open-minded.

Since the article you posted, I’ve uncovered a lot more about the prevalence of fraudulent apps on the App Store: https://www.theverge.com/2021/4/21/22385859/apple-app-store-...

Re:Shipping containers are falling overboard at a rapid rate on Thursday April 29, 2021 @08:18PM (#26988478)
> drop in the ocean

cough

Re:Another top-grossing scam on the App Store on Wednesday April 14, 2021 @01:07PM (#26809923)
Yesterday’s thread of a different scam: https://news.ycombinator.com/item?id=26794228

Today’s thread is about a VPN scam (!)

Re:A top-grossing scam on the App Store on Tuesday April 13, 2021 @03:54PM (#26798222)
Also, from my other comment, Apple could let us sideload notarized apps. This means:

- Automated scan for malware

- Remote kill switch, just in case

They already do this for macOS [1]:

> “Notarization is not App Review. The Apple notary service is an automated system that scans your software for malicious content, checks for code-signing issues, and returns the results to you quickly.”

They could give users a choice, much like they're doing with the new App Tracking Transparency prompt. But when pressed on why Apple should have control, Cook said "Somebody has to."

That's… not a very convincing argument.

[1]: https://developer.apple.com/documentation/xcode/notarizing_m...

Re:A top-grossing scam on the App Store on Tuesday April 13, 2021 @03:47PM (#26798102)
“Sideloading Apps Would ‘Break’ the Security and Privacy of iPhone”, said Tim Cook.

But instead of gaslighting us, Apple could let us sideload notarized apps. This means:

- Automated scan for malware

- Remote kill switch, just in case

They already do this for macOS [1]:

> “Notarization is not App Review. The Apple notary service is an automated system that scans your software for malicious content, checks for code-signing issues, and returns the results to you quickly.”

They could give users a choice, much like they're doing with the new App Tracking Transparency prompt. But when pressed on why Apple should have control, Cook said "Somebody has to."

That's… not a very convincing argument.

[1]: https://developer.apple.com/documentation/xcode/notarizing_m...

Re:A top-grossing scam on the App Store on Tuesday April 13, 2021 @02:13PM (#26796628)
Apple removed the “Report a Problem” button they used to have on the App Store for each app: https://twitter.com/keleftheriou/status/1381463249749565440?...
I’m the developer mentioned in the article. Send me the details at [email protected] and I’ll do my best to expose them.

Older »