4 ms·
The question is why don't these APIs require authorization in the first place? Obfuscation is a terrible security practice.
by achr2 11y ago
The question is why don't these APIs require authorization in the first place? Obfuscation is a terrible security practice.
- josso 11y agoBecause as soon as Apple publish something as an API, they can't change the method because third party apps could now be depending on it. As long as the API is private and undocumented, Apple can change the method from release to release as they see fit.
- JupiterMoon 11y agoBut what about making them private APIs that also require authorisation.
- NateLawson 11y agoMany do require this, but there are current sandbox limitations that make this harder to change quickly.