6 ms·
Cracking the code behind Apple’s App Store promo card design
- thebiglebrewski 9y agoWow this is really cool! So how do you get the promo codes at all? Do you buy those through an API? Are you considered Apple will shut you down somehow?
- mikeash 9y agoYou can generate promo codes on iTunes Connect. They're fairly limited: you can only get 100 promo codes per app version, and you're not allowed to use them for commercial purposes. As long as you're not selling these cards, I don't think Apple would have a problem with them.
- thebiglebrewski 9y agoInteresting.
- rbritton 9y agoI have no idea if this is within the rules, but another option could be to use the "Gift This App" function to generate paid, non-expiring promo codes instead (send it to yourself). You'd incur the 30% App Store revenue cut this way in addition to any sales tax.
- mikeash 9y agoThat's an interesting idea. I wonder what Apple would think. On one hand, they still get their cut. On the other hand, they like having full control over the experience. On the gripping hand, how could they even stop it?
- striking 9y ago... by kicking you off the store?
- mikeash 9y agoPossibly. But unlike standard promo codes, you could easily do this from a separate account that's not in any way linked to your developer account.
- haikuginger 9y agoBecause if there's one thing we've learned, it's that developers doing things they're not supposed to do on the App Store always do a great job of keeping their "black hat" account separate and distinct from their "real" account.
- jakobegger 9y agoSince apps are ranked in the App Store by revenue and number of apps sold, buying copies yourself could also be seen as ranking fraud, so I'd assume Apple wouldn't like it.
- jolux 9y agoStarbucks used to have cards that would let you download individual apps that worked like this.
- mikeash 9y agoI think I remember that. Were they paid apps Starbucks had a deal with, or free ones?
- mstade 9y agoI never saw it for apps, only music.
- eltoozero 9y agoLots of paid apps, games and even e-books, I have several cards for Monument Valley.
- chipperyman573 9y agoIf you have an extra one and don't mind sharing, I've been waiting to get into stardew valley... If you could email it to me (in my profile page) I'd be so happy :)
- ReverseCold 9y agoPsst... He said monument valley, not stardew valley. :)
- techsupporter 9y agoBit of both. I downloaded some free apps via the cards but mostly they were paid app redemption codes (in-app purchases excluded, of course). The program moved to the Starbucks app a year or so ago but seems to have stopped.
- rbritton 9y agoAn old episode of Build and Analyze discussed participation in the Starbucks promotion: http://5by5.tv/buildanalyze/80 http://5by5.tv/buildanalyze/80
- tiirbo 9y agoVery cool stuff.
- amatecha 9y agoAt first I thought this was going to be some kind of sketchy "keygen" thing, but I was glad to see they've just deciphered the way to make your own iTunes-scannable promo code printouts! Very cool. :)
- Macsenour 9y agoAm I right in assuming that we could use this in our apps to do different things other than a promo?
- amatecha 9y agoI don't think so - it's only used when you trigger the Redeem Code action and you scan the code via camera ...
- Macsenour 9y agoI can't catch that before it triggers a "call" to Apple to very the code and do something else? I'm thinking of rerouting to a feature inside my app that's special to users of that code.
- xsmasher 9y agoUsers redeem codes from inside the App Store app on their phone. You can generate codes to give you app away for free, or to grant a free in-app purchase, but that is all. There's no callbacks from the app store to your app to intercept. Possibly you could do what you want with QR codes and launch URLs, or by doing camera+OCR stuff yourself inside your app.
- favorited 9y agoIt's also likely a copyright violation to use that font file without permission. Typefaces have never been copyrightable in the US, but digital fonts implementing a typeface have been since the early 90s.
- seandougall 9y agoThis all sounds like it was done without duplicating the font itself (aside from installing it, which does make a copy in one of the Library/Fonts folders, but afaik that isn't been considered duplication for copyright purposes). And it could be done easily enough without even making that copy (a symlink would likely do it).
- mschuster91 9y agoSo does this mean that the iPhone camera is always awake and scanning for said box with code?!
- sp332 9y agoNo, see the image http://blog.equinux.com/wp-content/uploads/2017/07/scan-card-mdpro-secretfont-1024x653.jpg http://blog.equinux.com/wp-content/uploads/2017/07/scan-card...
- hrrsn 9y agoNo, it's only activated when you go to redeem a card in the iTunes/App Stores.
- valuearb 9y agoif you are worried about any of the sensors on your phone always being on, remember that Apple and Google need their relative OSes to make battery charges last as long as possible. So always on stuff is problematic. For a good user experience Bluetooth and wifi usually need to be on, but GPS, camera and microphone usually don't.
- nv-vn 9y agoHow is always-on useful for Bluetooth? In fact, it's a huge vulnerability if that's the case. On Android I simply turn it on to connect to something and off to disconnect.
- seandougall 9y agoYou can do that on iOS too -- and discoverability is, as usual, a transient state that you invoke manually. So most people probably leave BT on, but not discoverable, most of the time.
- HappyTypist 9y agoGPS is basically always on - on iOS if you have a background location app, you're being located every 5 minutes at least.
- huhtenberg 9y agoIt's likely that they use custom font not as a deterrence measure, but merely because it's specifically designed to simplify their recognition code.
- Theodores 9y agoExactly. Also the box and placing was no 'security measure', just the way it worked. It is very interesting to see how the view of the person trying to 'break the cipher' is different to the mindset of the team that had to get it to work. They were probably security paranoid about the hackability of their work but in a totally different direction to that 'seen' by someone 'breaking the cipher'.
- kharms 9y agoWhile I imagine it's not a security measure, I don't think it's "just the way it worked" either. It sounds like a conscious decision to limit false positives.
- pfranz 9y agoTo elaborate what the parent was talking about when they said "the way it worked" (it might also be what you're talking about). My guess is that the box is useful to straighten, unskew, and scale the image before applying the OCR. You could /try/ to do it looking at the baseline and cap heights of the text itself, but you wouldn't know the scale in either direction. I imagine those font identifiers would have been a lot better if they could have known those things.
- raldi 9y ago> Surrounding box, w/ proportions of the box (ratio 3 width : 1 height) I don't understand this part. The aspect ratio of the box seems much more extreme than 3:1.
- oeauns8sr 9y agoIt is. I downloaded their image and it's like 540x128 or so. If it were 512x128 it would be 4:1, but it's slightly larger, like 4.2:1 (er... 21:5?). I was highly confused by that as well.
- userbinator 9y agoI feel like I've seen that font before, on non-Apple electronic products, where it was used for similar serialisation and part numbering purposes. It actually looks like a monospace version of http://www.identifont.com/find?font=code&q=Go http://www.identifont.com/find?font=code&q=Go I wonder if Apple actually designed this font, or just asked for permission and extracted it from the built-in font of some industrial printing machine.
- madeofpalk 9y agoThat font is extremely different from the one Apple is using. Compare the Q and K for the biggest differences that wouldn't be effected by 'monspacifying' it.
- dingo_bat 9y agoAny technical reason not to use a QR code?
- rhythmvs 9y agoThat mysterious font actually is an adaptation of one of the oldest typefaces around specifically designed for optical character recognition. OCR-B (1968), by Adrian Frutiger. It’s used everywhere still, on credit cards, wire transfer forms, license plates, etc. etc. It’s even an industry standard (ISO 1073-2:1976). https://en.wikipedia.org/wiki/OCR-B https://en.wikipedia.org/wiki/OCR-B So, it’s as ‘custom’ as Apple’s (pre San Francisco) systemfont Myriad, compared to Frutiger’s Frutiger, who said of the adaptation: “not badly done” while feeling that the similarities had gone “a little too far”… — https://en.wikipedia.org/wiki/Myriad_(typeface) https://en.wikipedia.org/wiki/Myriad_(typeface)
- kevincox 9y agoCan someone explain what these promo codes are for? If they are just scanned by iTunes wouldn't you need to register them somehow in order for them to be useful?
- kchr 9y ago> Or you could use Mail Designer Pro to share your promo codes, e.g. to send a nice promo code email to a journalist. It adds a bit of magic to the experience if your email is scannable Yeah, sounds very convenient... How exactly would that work?
- mistersquid 9y agoIt's one step removed. You would use your phone to scan the email displayed on your computer.
- svdgraaf 9y agoIs this the same font used by the (scannable) homekit activation keys, which are usually printed on the box/device?
- tdeck 9y agoI've never used one of these cards, but the one in the photo has a barcode on it. Why doesn't the software just read that instead?
- lexicality 9y agoThat'll be the GTIN - what the store scans on their till when you buy it. It's the same on all cards of that type.