4 ms·

Huh. Cool! As I said elsewhere in the thread, my personal intuition is that Apple is a significantly better steward of my information (and credit card!) than a

by s3cur3 6y ago

Huh. Cool! As I said elsewhere in the thread, my personal intuition is that Apple is a significantly better steward of my information (and credit card!) than a random small-time dev on the internet, but I realize not everyone agrees.

mmastrac 6y ago
The security of my credit card is really up to Visa or Mastercard to deal with. I'm more likely to have it stolen by a random fast-food worker than entering it into a PCI-compliant website (out of all the times it's been compromised, they've nearly always been because it was handed over to someone to scan in the USA).
xoa 6y ago
FWIW, most small time devs aren't going to be "stewards of information" to any significant degree unless they're actively trying. Handling finance will be outsourced either way, using Stripe or one of many other 3rd party services, you wouldn't be processing any of that yourself. I buy a ton of 3rd party indy software on my Mac and always have, and nothing from the MAS, and typically the only "personal info", kind of, is an email and maybe my name (and it's not as if that's verified somehow, I could just put in whatever). I also have plenty of email accounts and can trivially make more, as well as developer-specific aliases. Plus there are other tools to further layer if it was ever a problem, like virtual credit card numbers. In practice the very nature of credit cards means it doesn't seem to generally be a problem, has been less of a real world risk than hacks of physical retailers. If I see a bad charge, I just report it and get a new number. Also FWIW, I've seen plenty of sites starting to offer Apple Pay as an option at checkout, I assume it's getting built into more payment systems now. That itself is solid defense, at least as good as the MAS though sometimes the checkout flows seem a bit wonky still.

4 ms·

Huh. Cool! As I said elsewhere in the thread, my personal intuition is that Apple is a significantly better steward of my information (and credit card!) than a

by s3cur3 6y ago

mmastrac 6y ago
The security of my credit card is really up to Visa or Mastercard to deal with. I'm more likely to have it stolen by a random fast-food worker than entering it into a PCI-compliant website (out of all the times it's been compromised, they've nearly always been because it was handed over to someone to scan in the USA).
xoa 6y ago
FWIW, most small time devs aren't going to be "stewards of information" to any significant degree unless they're actively trying. Handling finance will be outsourced either way, using Stripe or one of many other 3rd party services, you wouldn't be processing any of that yourself. I buy a ton of 3rd party indy software on my Mac and always have, and nothing from the MAS, and typically the only "personal info", kind of, is an email and maybe my name (and it's not as if that's verified somehow, I could just put in whatever). I also have plenty of email accounts and can trivially make more, as well as developer-specific aliases. Plus there are other tools to further layer if it was ever a problem, like virtual credit card numbers. In practice the very nature of credit cards means it doesn't seem to generally be a problem, has been less of a real world risk than hacks of physical retailers. If I see a bad charge, I just report it and get a new number. Also FWIW, I've seen plenty of sites starting to offer Apple Pay as an option at checkout, I assume it's getting built into more payment systems now. That itself is solid defense, at least as good as the MAS though sometimes the checkout flows seem a bit wonky still.