4 ms·
So why not build a standard mechanism to install and update 3rd party software into the OS? It's hardly a radical idea. There are plenty of solutions to that pr
by Silhouette 6y ago
So why not build a standard mechanism to install and update 3rd party software into the OS? It's hardly a radical idea. There are plenty of solutions to that problem that don't involve monopolising the distribution of all software on the platform.
- wlesieutre 6y agoI agree in principle that this would be OK, except part of Apple's vetting processes is making sure apps aren't accessing private APIs. I don't want to download a game and find out that it's secretly spinning up a background spyware process to monitor the screenbuffer and sending the screenshots off to god knows where.
- Apocryphon 6y agoPresently, security researchers are already finding both major apps doing this on the Apple App Store (Facebook accessing the camera on the News Feed), and spyware apps happening on secondary Android stores (also on the official Play Store). Sounds like an opportunity for more security watchdog businesses.
- wlesieutre 6y agoThe recent camera and clipboard things aren't private APIs, so the review process isn't looking for them being used in sneaky ways. I do appreciate iOS 14 adding a user-facing indication so we can tell when it's being abused though.
- Silhouette 6y agoSurely the solution to that is not to have your OS expose "private" APIs that allow abusive behaviour? It's not as if they aren't widely exploited even on the official app store today. Once again, trying to filter malware at the app store level is not a viable strategy for robust, reliable security, and it never has been.