4 ms·

The iOS marketshare is a orders of magnitude larger than that of macOS so the target vector is larger. Malware and the like would be hugely more profitable on i

The iOS marketshare is a orders of magnitude larger than that of macOS so the target vector is larger. Malware and the like would be hugely more profitable on iOS than macOS.

mikeash 10y ago
It is now, but it wasn't when the App Store was introduced. In any case, malware is best prevented by strong sandboxing. Forcing everyone to go through the store does approximately nothing to fight malware.
- kabdib 10y ago
  Sandboxing has proven pretty weak in mobile products (definitely in the case of Android; the iOS sandboxing has had a better track record). Additionally, not all malware needs to escape a sandbox. For instance, there are a bunch of fake apps that simply capture credentials, or that make expensive phone calls or texts. A well-run store that can run tools against images is a decent first line of defense against malware. A store also provides reliable information about code publishers. These are not a complete defense, but they appear necessary.
  - mikeash 10y ago
    A big part of Android's problem is that the permissions model sucks. Until recently, all permissions requested by an app had to be granted up-front as part of installing the app. Apps tended to request anything and everything for no good reason. This trained users to just click through the permissions screen without paying any attention to it. The iOS model (and now Android model) of prompting for permission when the app first tries to use it is much more solid. If an app requests access to your contacts for no good reason, you'll get a fairly obvious prompt and you can say no. There's still some trouble with getting users to pay attention, but it's a lot better. I don't see how this makes a store appear necessary. Android doesn't allow sideloading by default, and iOS can now sort of sideload apps using the new free signing stuff Apple put out. The limits on the number and duration of sideloaded apps make them impractical for selling legitimate software, but are no obstacle to malware.
kitsunesoba 10y ago
I have no doubts that if Apple had been more open in terms of publishing apps for iOS, the App Store would closely resemble the current Play Store in terms of malware and junkware. Something as personal and often-used as a smartphone is just too tempting of a target.

The iOS marketshare is a orders of magnitude larger than that of macOS so the target vector is larger. Malware and the like would be hugely more profitable on iOS than macOS.

mikeash 10y ago

It is now, but it wasn't when the App Store was introduced. In any case, malware is best prevented by strong sandboxing. Forcing everyone to go through the store does approximately nothing to fight malware.

kabdib 10y ago
Sandboxing has proven pretty weak in mobile products (definitely in the case of Android; the iOS sandboxing has had a better track record). Additionally, not all malware needs to escape a sandbox. For instance, there are a bunch of fake apps that simply capture credentials, or that make expensive phone calls or texts. A well-run store that can run tools against images is a decent first line of defense against malware. A store also provides reliable information about code publishers. These are not a complete defense, but they appear necessary.
- mikeash 10y ago
  A big part of Android's problem is that the permissions model sucks. Until recently, all permissions requested by an app had to be granted up-front as part of installing the app. Apps tended to request anything and everything for no good reason. This trained users to just click through the permissions screen without paying any attention to it. The iOS model (and now Android model) of prompting for permission when the app first tries to use it is much more solid. If an app requests access to your contacts for no good reason, you'll get a fairly obvious prompt and you can say no. There's still some trouble with getting users to pay attention, but it's a lot better. I don't see how this makes a store appear necessary. Android doesn't allow sideloading by default, and iOS can now sort of sideload apps using the new free signing stuff Apple put out. The limits on the number and duration of sideloaded apps make them impractical for selling legitimate software, but are no obstacle to malware.

kitsunesoba 10y ago

I have no doubts that if Apple had been more open in terms of publishing apps for iOS, the App Store would closely resemble the current Play Store in terms of malware and junkware. Something as personal and often-used as a smartphone is just too tempting of a target.