5 ms·

iOS doesn't. Apps using private APIs are not allowed on the App Store. Apple granted Uber an entitlement for a private API, but no other app has this: https://t

by hrrsn 9y ago

iOS doesn't. Apps using private APIs are not allowed on the App Store. Apple granted Uber an entitlement for a private API, but no other app has this: https://twitter.com/chronic/status/915930211941781504 https://twitter.com/chronic/status/915930211941781504

vbezhenar 9y ago
This believe based on trust to Apple, not on technical limitations. I always wondered about this concept of private API: available to anyone but theoretically forbidden to be used. I'm sure that there's a million ways to circumvent Apple's static code analysis and slip through their review. Why didn't Apple limit their API usage with technical restrictions.
- Klathmon 9y ago
  It's pretty trivial to bypass Apples code analysis for private API usage, at least a few years ago it was.
- sjwright 9y ago
  Technical limitations == trusting Apple. App store validation == trusting Apple.
- threeseed 9y ago
  > Why didn't Apple limit their API usage with technical restrictions. Because this was impossible without forcing users to stop using Objective-C. The language allows dynamic method dispatch and so it's always possible to allow internal API calls.
- TazeTSchnitzel 9y ago
  > This believe based on trust to Apple, not on technical limitations. I don't think you're right; “entitlement” is a technical term used for OS-enforced permissions on Apple platforms.
- hrrsn 9y ago
  >This believe based on trust to Apple, not on technical limitations. I trust Apple a lot more than Google/Facebook/etc.
- gambiting 9y ago
  It's the same when developing for PS4/X1 - headers have methods which are not documented and you're not allowed to use them - if you do, the game will fail certification. I guess they just check if the executable is linked against them and won't certify the game.
- innagadadavida 9y ago
  It is technically impossible to do what you are suggesting, otherwise many apps would already be doing it. If there any documented and known issues with the app validation process, please share links.
  - vbezhenar 9y ago
    Why is it technically impossible? Move functionality to kernel or to another blessed process and restrict interface via sysctls or any kind of RPC. It's like using SQL from JavaScript and forbid users to open developer console.
txsh 9y ago
In the comment thread you linked to the author has a “faint recollection” of what I’m referring to, confirms Facebook has special access because of iOS integration. So I’m not sure why you posted that. Seems to undermine your argument.

by hrrsn 9y ago

vbezhenar 9y ago

This believe based on trust to Apple, not on technical limitations. I always wondered about this concept of private API: available to anyone but theoretically forbidden to be used. I'm sure that there's a million ways to circumvent Apple's static code analysis and slip through their review. Why didn't Apple limit their API usage with technical restrictions.

Klathmon 9y ago
It's pretty trivial to bypass Apples code analysis for private API usage, at least a few years ago it was.
sjwright 9y ago
Technical limitations == trusting Apple. App store validation == trusting Apple.
threeseed 9y ago
> Why didn't Apple limit their API usage with technical restrictions. Because this was impossible without forcing users to stop using Objective-C. The language allows dynamic method dispatch and so it's always possible to allow internal API calls.
TazeTSchnitzel 9y ago
> This believe based on trust to Apple, not on technical limitations. I don't think you're right; “entitlement” is a technical term used for OS-enforced permissions on Apple platforms.
hrrsn 9y ago
>This believe based on trust to Apple, not on technical limitations. I trust Apple a lot more than Google/Facebook/etc.
gambiting 9y ago
It's the same when developing for PS4/X1 - headers have methods which are not documented and you're not allowed to use them - if you do, the game will fail certification. I guess they just check if the executable is linked against them and won't certify the game.
innagadadavida 9y ago
It is technically impossible to do what you are suggesting, otherwise many apps would already be doing it. If there any documented and known issues with the app validation process, please share links.
- vbezhenar 9y ago
  Why is it technically impossible? Move functionality to kernel or to another blessed process and restrict interface via sysctls or any kind of RPC. It's like using SQL from JavaScript and forbid users to open developer console.

txsh 9y ago

In the comment thread you linked to the author has a “faint recollection” of what I’m referring to, confirms Facebook has special access because of iOS integration. So I’m not sure why you posted that. Seems to undermine your argument.