3 ms·

The security on iPhone comes from the app sandbox, not from App Store review. There are lots of scam apps on the App Store, despite Apple's review. Apps from 3

The security on iPhone comes from the app sandbox, not from App Store review. There are lots of scam apps on the App Store, despite Apple's review. Apps from 3rd party stores will be sandboxed just like apps from the App Store are today.

dwaite 4y ago
>The security on iPhone comes from the app sandbox, not from App Store review. Some of it. But Apple has the real-world identity of developers/organizations, and will ban them from the App Store for malicious behavior. And next to no privacy protections are from App Sandbox. You can turn off things like advertising identifiers, but there are a million other unique hardware identifiers as well as things like IP addresses which can be used to track someone. The way Apple solves this is - you need to get user consent to track, which will also hand you the advertising identifier. But if the user does not consent, you can't work around it by correlating other data from the phone. Or we will kick you out of the store. > There are lots of scam apps on the App Store, despite Apple's review. Just imagine how bad it would be without review. > Apps from 3rd party stores will be sandboxed just like apps from the App Store are today. Will they? Without someone reviewing/approving entitlements for side-loaded apps, they can all effectively seek out as many entitlements from the menu as they want.
- newaccount74 4y ago
  App Sandbox offers a lot of privacy protections. For example, you can't access bluetooth / GPS / etc. without the OS asking the user for permission. Apple has also started to require entitlements for local networking, and so on. There's really no point in having Apple check those permissions. It would be much better if the user could check entitlements. What Apple currently offers (the privacy information and the tracking consent) is all based on goodwill from the publisher -- if the publisher says they don't track you, but they still do, it's going to be very hard to prove.

dwaite 4y ago

>The security on iPhone comes from the app sandbox, not from App Store review. Some of it. But Apple has the real-world identity of developers/organizations, and will ban them from the App Store for malicious behavior. And next to no privacy protections are from App Sandbox. You can turn off things like advertising identifiers, but there are a million other unique hardware identifiers as well as things like IP addresses which can be used to track someone. The way Apple solves this is - you need to get user consent to track, which will also hand you the advertising identifier. But if the user does not consent, you can't work around it by correlating other data from the phone. Or we will kick you out of the store. > There are lots of scam apps on the App Store, despite Apple's review. Just imagine how bad it would be without review. > Apps from 3rd party stores will be sandboxed just like apps from the App Store are today. Will they? Without someone reviewing/approving entitlements for side-loaded apps, they can all effectively seek out as many entitlements from the menu as they want.

newaccount74 4y ago
App Sandbox offers a lot of privacy protections. For example, you can't access bluetooth / GPS / etc. without the OS asking the user for permission. Apple has also started to require entitlements for local networking, and so on. There's really no point in having Apple check those permissions. It would be much better if the user could check entitlements. What Apple currently offers (the privacy information and the tracking consent) is all based on goodwill from the publisher -- if the publisher says they don't track you, but they still do, it's going to be very hard to prove.