42 ms·
Are those two really significantly different in sandboxing and permission model? Should also point out that neither app store is perfect and both have let mal
by kramerger 4y ago
Are those two really significantly different in sandboxing and permission model?
Should also point out that neither app store is perfect and both have let malicious app slip through. Thanks to the Epic lawsuit we also know that they have tried to hide major incidents ( as in 500M installs of potential malware) from consumers.
- scarface74 4y agoYes, there is no API on iOS that allows most of the things listed in the article that apps can use even it tried to use non documented APIs. > After installation, they covertly record the victim’s device activities — including any text messages, emails, photos, or voice calls — and allow abusers to remotely review this information through a web portal And the “malware” that was installed was because people were using hacked XCode versions that didn’t come from Apple and they still didn’t escape the sandbox.
- kramerger 4y agoThat's not really sandboxing, just a limitation of what apps can do on iPhone. And I belive it has changed recently. Doesn't really matter how the malware get there. The important part is that it waltzed right past Apples quality control.
- scarface74 4y agoDidn’t I just say that? Both App Store review processes are far from perfect. But even when app developers were inadvertently delivering malware to the App Store because of third party download of XCode, the blast radius was much more limited because Apple had sense enough to know that it might be a bad idea to let random third party apps intercept your text messages and phone calls