4 ms·
No, Apple has a content blocking API. The only thing the app can do is tell iOS something along the lines of “scan incoming SMS for this regex, if it matches, t
by sgerenser 4y ago
No, Apple has a content blocking API. The only thing the app can do is tell iOS something along the lines of “scan incoming SMS for this regex, if it matches, throw it in junk.” The blocker app never actually sees the messages.
- gondo 4y agoThis message displayed before allowing app access contradicts your statement: "The developer of Bouncer will receive the text, attachments and sender information in SMS and MMS messages from senders not in your Contacts. Messages may include personal or sensitive information like bank verifications codes."
- cmer 4y agoI uninstalled it immediately when I saw that. Having control of this data is way better than SIM swapping. This seems like a terribly risky thing to install, security-wise.
- pensatoio 4y agoAll spam filtering apps for iOS have this permission though, right? That’s just how it works. The permission is just very blunt to make it clear.
- vengefulduck 4y agoI’m not so sure that’s true reading through the privacy notice when enabling SMS filtering it reads “You can install and use third-party SMS filters. If you do, the filter provider can access all of the text and content included in incoming SMS and MMS messages that you receive from unknown senders.” That doesn’t sound like the same thing as the content blocker api it sounds like it provides plaintext access to sms messages. And it’s enough of a risk that I decided not to install it.
- crooked-v 4y agoThe SMS content blocker API gives that plaintext access. It doesn't work like the browser content blocking API.
- kemayo 4y agoYou're thinking of the way web content blocking works. This is a SMS filter, which is given actual access to the message contents. However, the extension isn't allowed to make network requests while it's doing that, and has to pass off a request to contact a server to an iOS service than handles this outside of the extension's control. (I'm not actually sure what restrictions are involved on what Apple will send to your own server, admittedly.)