4 ms·
Thinking about it, Apple seems like they'd have better dealt with this sort of issue in four ways: * Stricter review process to catch this preemptively * Stri
by marcinzm 6y ago
Thinking about it, Apple seems like they'd have better dealt with this sort of issue in four ways:
* Stricter review process to catch this preemptively
* Stricter app isolation to limit impact without a vulnerability explicit
* Longer maintained and more forceful operating system updates to minimize the number of phones running with known exploits
* Likely removing/disabling app from phones and not just the app store
- mcpeepants 6y agoI think you mean Google, but also noting that #4 is possible (supposedly) through Google Play Protect
- swiley 6y agoStuff like this happens on iOS all the time and everyone just ignores it because it's mostly sandboxed. Apple is terrible at stopping malware until it ends up in the news.
- ship_it 6y agoSource? Or you just made that up?
- joshuaissac 6y agoHere's an example of 18 such apps from 2019: https://www.wired.com/story/apple-app-store-malware-click-fraud/ https://www.wired.com/story/apple-app-store-malware-click-fr... Another from 2018: https://www.zdnet.com/article/top-mac-anti-adware-software-in-apple-app-store-steals-your-browsing-history/ https://www.zdnet.com/article/top-mac-anti-adware-software-i...
- marcinzm 6y agoThe first didn't cause any user issues as I'm reading it except extra data usage. I don't think it even did it in the background but only when the app was running. So I wouldn't even call it malware. Unlike this Android app which showed ads to users outside the app. The second is Mac not iOS which had a much more relaxed security model.
- joshuaissac 6y agoThe article about the 18 apps says that the ads were running in the background. A Forbes article on the same incident also reports that data was exfiltrated from the infected devices: > the trojan [...] sent data from the infected device to an external command and control server.