3 ms·

> While I love the idea of being able to finally install SNES emulators and the like, many malicious actors will now pray on unsuspecting iOS users to install s

> While I love the idea of being able to finally install SNES emulators and the like, many malicious actors will now pray on unsuspecting iOS users to install spyware, malware, and other crap via third-party app stores. Not everyone is as sophisticated as the typical Hacker News reader; younger and more naive users will be taken in as victims of various types of fraud. Think of the naive users argument has never made sense to me, just allow someone to flip a switch in settings that says “do not flip or your phone could be taken over by hostile viruses” or something to that effect. If someone is going to flip that switch and then install what someone tells them over the phone, why wouldn’t the attacker just ask for them to log into a fake bank site at that point? How much is the App Store saving them?

ttul 4y ago
Let me sketch a scenario for you. Your grandmother receives an email from a trustworthy-sounding man who asks her to follow these easy steps to get a free app. Granny taps "Allow third-party app stores" and then installs whatever garbage the fraudster is hoping she will install. Multiply this by tens of thousands of vulnerable users and you have the makings of a significant problem that will cost society a lot of money and lead to much misery. With the locked-down Apple app store, it's very difficult for granny to install malware even if the trustworthy-sounding man in her inbox is being "helpful". But as soon as you allow a switch of any kind, it will be exploited.
- mattnewton 4y ago
  Both my grandmothers used to run android phones and windows computers where this is possible and neither were ever successfully attacked this way. However, one grandmother did experience people trying to scam her into giving them money through other means. I think simply requiring a “I know what I am doing and want to open up the hood” button is sufficient.
- stale2002 4y ago
  > With the locked-down Apple app store If people actually cared about this argument, then they would jump to the immediate and obvious solution to it. Simply allow users to choose an option, that allows the phone to be locked down. If you want to go hardcore, make it require a factory reset to change, if you actually care that much. This way everyone wins. People who want some locked down, gimped phone, can choose to do that. And everyone else can choose to not turn on "child mode".
- simion314 4y ago
  Let me update your scenario, instead of the innocent granny installing an iOS app the evil dude asks her to just give her the security code she just revived from a bank, or she should open a link and login to her bank. I think you need a Big Brother for your granny, Apple needs to make Safari granny proof and whitelist websites and they should also force user to provide a national ID before calling to an iOS device, think of all the grannies. Imagine though an universe where Apple could hire some competent people that could create a genius popup that would explain granny that she should not enable that, and to enable that maybe she needs to use a code that is printed on the phone box.

ttul 4y ago

Let me sketch a scenario for you. Your grandmother receives an email from a trustworthy-sounding man who asks her to follow these easy steps to get a free app. Granny taps "Allow third-party app stores" and then installs whatever garbage the fraudster is hoping she will install. Multiply this by tens of thousands of vulnerable users and you have the makings of a significant problem that will cost society a lot of money and lead to much misery. With the locked-down Apple app store, it's very difficult for granny to install malware even if the trustworthy-sounding man in her inbox is being "helpful". But as soon as you allow a switch of any kind, it will be exploited.

mattnewton 4y ago
Both my grandmothers used to run android phones and windows computers where this is possible and neither were ever successfully attacked this way. However, one grandmother did experience people trying to scam her into giving them money through other means. I think simply requiring a “I know what I am doing and want to open up the hood” button is sufficient.
stale2002 4y ago
> With the locked-down Apple app store If people actually cared about this argument, then they would jump to the immediate and obvious solution to it. Simply allow users to choose an option, that allows the phone to be locked down. If you want to go hardcore, make it require a factory reset to change, if you actually care that much. This way everyone wins. People who want some locked down, gimped phone, can choose to do that. And everyone else can choose to not turn on "child mode".
simion314 4y ago
Let me update your scenario, instead of the innocent granny installing an iOS app the evil dude asks her to just give her the security code she just revived from a bank, or she should open a link and login to her bank. I think you need a Big Brother for your granny, Apple needs to make Safari granny proof and whitelist websites and they should also force user to provide a national ID before calling to an iOS device, think of all the grannies. Imagine though an universe where Apple could hire some competent people that could create a genius popup that would explain granny that she should not enable that, and to enable that maybe she needs to use a code that is printed on the phone box.