3 ms·
How does this even work? The iOS pop-up should have priority over any attempts for the app to block pressing areas of the screen.
by minimaxir 5y ago
How does this even work? The iOS pop-up should have priority over any attempts for the app to block pressing areas of the screen.
- egocentric 5y agoYou’d think! This is not just possible, it's actually extremely easy to do. Hoping to share a proof of concept soon.
- m-p-3 5y agoAny app developer tampering with this should get their app pulled out of the App Store, this is unacceptable.
- mixedCase 5y agoYes. And it's even more unacceptable that the system is vulnerable to this kind of tampering.
- eschaton 5y agoNo, it’s not.
- egocentric 5y agoWhat is not?
- eschaton 5y ago“Even more unacceptable…” It’s not more unacceptable for an exploit to exist than it is for the exploit to be used. One is a risk, the other is actively attempting to do harm.
- alkonaut 5y agoYes. The review dialog should be shown by the system and the app itself should have no way of tampering with it. This should be the case for all such interactions, including permissions, image library selection etc. I realize APIs are hard to change but this is one of the cases where I think Apple should just fix it even if it bricks well-behaved apps until they can be patched (which could be never).
- tinus_hn 5y agoIt’s cheating so they should have their developer account banned with all their apps.
- bfuller 5y agoknowing how dealing with the ios support goes, i doubt this will happen any time soon.
- objc 5y agoI'm surprised this alert isn't presented from SpringBoard to prevent tampering
- naikrovek 5y agoare they putting transparent UI elements over the rating dialog and absorbing the taps? that's happened before in other platforms. not mobiles, but web browsers.
- goldenkey 5y agoYes but even Microsoft got the UAC dialog right...no user mode program can hijack it. For a company like Apple, this is laughably bad.
- WesSouza 5y agoCan you describe it in words before the proof?
- syockit 5y agoSince the user didn't show what happens when the submit button is pressed, I'm keen to believe that the pop-up is just a fake gimmick that just leads to the App Store to have the user write the review and rate the app manually.
- alkonaut 5y agoIt’s described how it’s the system dialog and not a fake.