3 ms·
_If_ this app did that kind of thing, I don’t see much of a difference. You can’t expect them to catch it at review. If picking it for being featured happens cl
by Someone 5y ago
_If_ this app did that kind of thing, I don’t see much of a difference. You can’t expect them to catch it at review. If picking it for being featured happens closely in time to that (likely, IMO) you can’t expect them to catch it at that time, either.
That leaves them being paranoid, and periodically rechecking all featured apps. Even if they do that, there still will be a time window in which the app misbehaves.
- Apocryphon 5y agoSounds like the vaunted App Store review isn’t all that it’s cracked up to be.
- Someone 5y agoIf an app can make a http request, parse the response, and do different things depending on the result, it’s hard to prove it won’t crash on receiving invalid input without access to the source code (often even with access to it. If that were easy, there wouldn’t be that many vulnerabilities from exploiting such crashes) If Apple required the source code, I predict an outcry “they’ll steal our code, just as they steal our ideas”. And no, LLVM Bitcode won’t help here, even ignoring (AFAIK) that they don’t require you to provide it (which would lead to another outcry “we can’t use gcc”) It’s too low level for that.