4 ms·

Wow, I'm so glad that apple forced me to implement this broken garbage into my apps! For those not aware, some time ago apple decided it would be a good idea t

by oauea 6y ago

Wow, I'm so glad that apple forced me to implement this broken garbage into my apps! For those not aware, some time ago apple decided it would be a good idea to develop their own sing in system, and then force all apps on their store (that already support e.g. Google Account login) to implement it. So they brought a huge amount of additional complexity in a large amount of apps, and then they fucked up security. Thank you apple!

toomuchtodo 6y ago
I still trust Apple over a rando site or SaaS app. No system is flawless.
- j4yav 6y ago
  I think I trust Apple over a random website too, but was adding an additional kind of sign in and forcing everyone to use it even needed in the first place?
  - kennywinker 6y ago
    Almost like apple and google have dangerously monopolistic positions in the mobile sphere and we need meaningful anti-trust action to claw back user freedom and choice?
  - neetdeth 6y ago
    I'm very willing to believe that this move was driven by actual user research. As a user, the last thing I want to do is create a user name and password for your app, click a link to validate my email, then enter my password again into some sort of cross platform widget that doesn't support keychain autofill. Unless it's an essential service like a bank or an airline, I'll probably opt out of using it. I'm also very lazy when it comes to payment methods. Trying to order food and the app doesn't support Apple Pay? Delete it and do something else. Clearly there are issues with the entrenchment of Apple at the center of all this, and these problems would be better solved with open standards, but the consistency and convenience makes an actual measurable benefit in the end user's daily life.
- oauea 6y ago
  Fortunately some rando site or SaaS app doesn't have the leverage to force me to implement additional garbage! Apple does, and did. I'm still surprised that this didn't trigger an antitrust investigation like when Microsoft abused their monopoly to push internet explorer. This is exactly the same thing, if not worse.
  - deleted 6y ago
    [deleted]
  - cdubzzz 6y ago
    I agree that the requirement from Apple here is kind of dumb, but I don’t see how it would not be in the best interest of a user of an app on an iOS device to have the option to sign in with an Apple ID. It also seems silly to consider it “garbage” when you already using a Google Account solution that is essentially the same thing.
    - oauea 6y ago
      It's garbage because it was forced into already functioning apps with the threat of removal, and because it evidently has gaping security holes.
  - alwillis 6y ago
    I'm still surprised that this didn't trigger an antitrust investigation like when Microsoft abused their monopoly to push internet explorer. This is exactly the same thing, if not worse. Um… no. Microsoft gave Internet Explorer away for free when Netscape was selling their browser to businesses, an obvious attempt to undermine Netscape. They also threatened to cancel the Windows 95 licenses for companies like HP that shipped Netscape with their computers instead of Internet Explorer. That would have essentially put them out of business. Because Microsoft had 95% of the operating system market share, it had signed a decent decree with the federal government that they wouldn’t use their monopoly in operating systems to their advantage in web browsers, which were a new software category then. So of course, they bundled Internet Explorer with Windows 95 and claim they couldn't be separated, an obvious lie, claiming Internet Explorer was a critical part of the operating system. All of this orchestrated by future humanitarian Bill Gates, who was quoted as saying then Microsoft needed to “cut off Netscape’s air supply.” Even in the United States, Apple isn’t a monopoly with about 40% market share. Everything Apple mandates is with companies who've contractually agreed to be part of Apple's developer program and abide by its rules. Nobody agreed to not ship a competing web browser back in the day.
- buboard 6y ago
  OTOH, rando SaaS flaws don't compromise the security of billions
  - toomuchtodo 6y ago
    haveibeenpwned would say otherwise.
- paxys 6y ago
  Yeah but I don't trust them over Google or Facebook when it comes to server side security, and this proves it.
  - toomuchtodo 6y ago
    I will still take an Apple security incident over the corporate surveillance apparatus that is Facebook and Google.
  - cdubzzz 6y ago
    Eh. I’ll take a found and fixed security issue in a feature aimed at keeping my email address private over Google and Facebook’s invasive behaviors.
WhyNotHugo 6y ago
Actually, developers are only forced to implement it _if_ they support logging in with other social auths. A big problem of many apps is that they only had a "log in with google"/"log in with facebook" button, which is very problematic for people who have neither. On Android this is more acceptable since you need a Google account for the OS itself anyway.
- aidenn0 6y ago
  But if I support "create an account" and "sign in with google" then you don't need a google account, but still I need to do sign in with apple.
- jimsug 6y ago
  > On Android this is more acceptable since you need a Google account for the OS itself anyway. I don't think you do, I'm pretty sure I've skipped that step during device setup on occasion.

by oauea 6y ago

toomuchtodo 6y ago

I still trust Apple over a rando site or SaaS app. No system is flawless.

j4yav 6y ago
I think I trust Apple over a random website too, but was adding an additional kind of sign in and forcing everyone to use it even needed in the first place?
- kennywinker 6y ago
  Almost like apple and google have dangerously monopolistic positions in the mobile sphere and we need meaningful anti-trust action to claw back user freedom and choice?
- neetdeth 6y ago
  I'm very willing to believe that this move was driven by actual user research. As a user, the last thing I want to do is create a user name and password for your app, click a link to validate my email, then enter my password again into some sort of cross platform widget that doesn't support keychain autofill. Unless it's an essential service like a bank or an airline, I'll probably opt out of using it. I'm also very lazy when it comes to payment methods. Trying to order food and the app doesn't support Apple Pay? Delete it and do something else. Clearly there are issues with the entrenchment of Apple at the center of all this, and these problems would be better solved with open standards, but the consistency and convenience makes an actual measurable benefit in the end user's daily life.
oauea 6y ago
Fortunately some rando site or SaaS app doesn't have the leverage to force me to implement additional garbage! Apple does, and did. I'm still surprised that this didn't trigger an antitrust investigation like when Microsoft abused their monopoly to push internet explorer. This is exactly the same thing, if not worse.
- deleted 6y ago
  [deleted]
- cdubzzz 6y ago
  I agree that the requirement from Apple here is kind of dumb, but I don’t see how it would not be in the best interest of a user of an app on an iOS device to have the option to sign in with an Apple ID. It also seems silly to consider it “garbage” when you already using a Google Account solution that is essentially the same thing.
  - oauea 6y ago
    It's garbage because it was forced into already functioning apps with the threat of removal, and because it evidently has gaping security holes.
- alwillis 6y ago
  I'm still surprised that this didn't trigger an antitrust investigation like when Microsoft abused their monopoly to push internet explorer. This is exactly the same thing, if not worse. Um… no. Microsoft gave Internet Explorer away for free when Netscape was selling their browser to businesses, an obvious attempt to undermine Netscape. They also threatened to cancel the Windows 95 licenses for companies like HP that shipped Netscape with their computers instead of Internet Explorer. That would have essentially put them out of business. Because Microsoft had 95% of the operating system market share, it had signed a decent decree with the federal government that they wouldn’t use their monopoly in operating systems to their advantage in web browsers, which were a new software category then. So of course, they bundled Internet Explorer with Windows 95 and claim they couldn't be separated, an obvious lie, claiming Internet Explorer was a critical part of the operating system. All of this orchestrated by future humanitarian Bill Gates, who was quoted as saying then Microsoft needed to “cut off Netscape’s air supply.” Even in the United States, Apple isn’t a monopoly with about 40% market share. Everything Apple mandates is with companies who've contractually agreed to be part of Apple's developer program and abide by its rules. Nobody agreed to not ship a competing web browser back in the day.
buboard 6y ago
OTOH, rando SaaS flaws don't compromise the security of billions
- toomuchtodo 6y ago
  haveibeenpwned would say otherwise.
paxys 6y ago
Yeah but I don't trust them over Google or Facebook when it comes to server side security, and this proves it.
- toomuchtodo 6y ago
  I will still take an Apple security incident over the corporate surveillance apparatus that is Facebook and Google.
- cdubzzz 6y ago
  Eh. I’ll take a found and fixed security issue in a feature aimed at keeping my email address private over Google and Facebook’s invasive behaviors.

WhyNotHugo 6y ago

Actually, developers are only forced to implement it _if_ they support logging in with other social auths. A big problem of many apps is that they only had a "log in with google"/"log in with facebook" button, which is very problematic for people who have neither. On Android this is more acceptable since you need a Google account for the OS itself anyway.

aidenn0 6y ago
But if I support "create an account" and "sign in with google" then you don't need a google account, but still I need to do sign in with apple.
jimsug 6y ago
> On Android this is more acceptable since you need a Google account for the OS itself anyway. I don't think you do, I'm pretty sure I've skipped that step during device setup on occasion.