![]() |
|
![]() |
| Definitely can't.
Though that's another story, targeted attacks will always find a way to slip through. This method can protect the general public a bit more compared to the current "screening". |
![]() |
| I love it, goes to show how useless the app verification process is.
One could probably find a way of fingerprinting reviewer systems to directly hide the feature only for them. |
![]() |
| Seems pretty unreliable. At least I know a recent Google Play Console reviewer was located at the Google office in Lisbon. I wouldn't be surprised if Apple used reviewers outside Cupertino. |
![]() |
| For those curious, here is Apple’s language on dynamic updates like what codepush allows: https://github.com/microsoft/react-native-code-push#store-gu...
“Executable Code Except as set forth in the next paragraph, an Application may not download or install executable code. Interpreted code may be downloaded to an Application but only so long as such code: (a) does not change the primary purpose of the Application by providing features or functionality that are inconsistent with the intended and advertised purpose of the Application as submitted to the App Store, (b) does not create a store or storefront for other code or applications, and (c) does not bypass signing, sandbox, or other security features of the OS.” |
![]() |
| Calling a piracy app "malicious" seems like a huge stretch. Am I missing something, or was this written by the copyright holders? |
![]() |
| Yup. I lost all respect for Apple's arguments that they should be allowed to gatekeep after they colluded with Google and Twitter in blocking the Parlor app right as it started to take off. |
![]() |
| > eco systems employ lock-in and network-effects to keep customers
Much of the lock-in often comes from deep eco system integration which is also good for the user in many cases. |
![]() |
| The vast majority of people don't use ad blockers.
I think the argument of "people usually make zero consideration about what software choice is best for them" very much holds. |
![]() |
| > Apple never claims to know what’s best for people.
"Buy your mom an iPhone." - Tim Cook https://www.theverge.com/2024/3/21/24107676/buy-your-mom-an-... > What you’re suggesting in this comment is that people shouldn’t be free to make that choice. I am suggesting that people in other countries are already making that choice, and it hasn't even remotely impacted your or their freedom. In fact, users that live in countries covered by the DMA have more freedom to use their iPhone than ever before. |
![]() |
| > Nothing in the AppStore will install on it
Odd, because my old Apple devices still let me sign in and offer me the last compatible versions of a lot of software, something Google doesn't do. |
![]() |
| What are you doing with that?
I'm in the same boat here. The AppStore endpoints have stopped being supported so I can't even sign in and forget about trying to update iOS. |
![]() |
| People say these things and I just have no idea how its possible. You can text android phones. Yes the bubble will be green. No, no one past middle school cares about the color of the bubble. |
![]() |
| > They are not "hostage" they can leave.
Bad choice 1, or bad choice 2 is not really choice. At this point a phone is a utility, as it’s nearly impossible to get through life without one. |
![]() |
| My point was that since most ‘necessary for life’ apps (e.g. corona vaccine app, bank, travel etc) are only offered on one of two platforms, those platforms cannot really be considered a choice. |
![]() |
| Choice?
Can you book slots with TSMC for 3nm chips to put in another device? Do you have hardware and software patents on obvious design patterns that users like? There is no choice. |
![]() |
| I also remember the cover and commentary when the iphoneOS AppStore first came out.
Most of it concerned what good value 30% represented to handle hosting, billing and marketing for the developer |
![]() |
| When most apps cost $1 in total, paying 30 cents for all that was probably good value. Now that many high-end apps cost more than $100/yr, paying >100x more for the same service is not good value. |
![]() |
| Yup… almost felt like a deterrent to put something in the AppStore.
Apple didn’t want users doing what they wanted on their iPhone. Only what was permitted. It’s nice that perspective evolved. |
![]() |
| So... what if the developers are right, and their activism is warranted? It certainly seems like the courts are leaning towards the sides of the developers in the US and Europe. |
![]() |
| A duopoly is a choice. Not a lot of choice granted, but still a choice. There are also other platforms (like Samsung etc) but you won't like them for other reasons. |
![]() |
| Have you read the article? It’s about Uber bypassing review so that it can track users against Apple’s rules, and against their will. Or other apps doing it so they can spread pirated software. |
![]() |
| and you can still jailbreak now if you want to. But even with a jailbreak, I’m not sure there apps, as opposed to tweaks that you could put on the iPhone. |
![]() |
| Tons of apps are just a webview of a remote webpage. They update every time the server updates the page. No review required. |
![]() |
| "Pirate streaming apps" ?
I thought it was about how they get Apple to allow those $50/month subscriptions for the flashlight apps... |
![]() |
| Sadly Apple doesn't need to be tricked to let spammy and scammy apps into the store. All that song and dance about protecting users is just marketing. |
![]() |
| How do these apps like collect cards reach the top of the app store to begin with? Is it because they are simply masquerading as piracy apps? And piracy apps are downloaded a lot? |
![]() |
| I think you've got your use of 'masquerading' here backwards. These *are* piracy apps, and presumably people share them since they want their friends to have free content too. |
![]() |
| A lot of security is human and process based. Technical is important, but the best software in the world won't survive someone being social engineered. |
1. Make an API call to your server with the build number of the app.
2. Have that API response control whether the "secret" features are available.
3. Only enable each build's secret features once it's passed review.
4. Profit?
No dynamic/interpreted code required.
And there are sufficient variations on this that I would guess it's reducible to the halting problem and thus undecidable.