3 ms·
This is like the analog loophole. If data is transferred from Server to Client, it's always possible to scrape. Though Apple is trying to make this harder: htt
by ec109685 3y ago
This is like the analog loophole. If data is transferred from Server to Client, it's always possible to scrape.
Though Apple is trying to make this harder: https://developer.apple.com/documentation/devicecheck/preparing_to_use_the_app_attest_service https://developer.apple.com/documentation/devicecheck/prepar...
- Tokumei-no-hito 3y agoI am not an iOS dev. What is the significance of App Attest wrt the loophole used here?
- ec109685 3y agoWith attest, Twitter can tell if there's an actual mobile device hitting Twitter with that bearer token versus today, you can spoof the client and unless they fingerprint the IP address or other subtleties, it's hard to distinguish fake traffic from real traffic.