3 ms·
Its very possibly that if the App also had network code for loading ads, say through iAds or AdMob, that an API scanner wouldn't notice anything unusual for a r
by statictype 16y ago
Its very possibly that if the App also had network code for loading ads, say through iAds or AdMob, that an API scanner wouldn't notice anything unusual for a reviewer to feel concerned about.
That's precisely the point. They can't catch underhanded code in the app unless they do a full source code audit - and honestly, I wouldn't be the least bit surprised if Apple changed the SDK license to require developers to upload their .xcodeproj files which get built and released from Apple's servers directly.
- chc 16y agoI'm not sure even a full code-audit is practical. Some big vendors use libraries under licenses that don't allow them to distribute the source to third parties (I don't know how prevalent this is on iPhone, but I know it happens in general), and Apple has shown an aversion to rules that mess with the big guns this way. It would also require a much higher caliber of app testers, because finding malicious code in a large codebase is nontrivial even if the malware writer isn't being particularly clever. This would basically require Apple to severely choke the App Store pipeline, and given Apple's relatively lax attitude toward security, I don't think they'd make that tradeoff.