4 ms·
> it can download all your private information > Pop a warning every single time it accesses contacts or location, don't allow third party apps outside the App
by dns_snek 3y ago
> it can download all your private information
> Pop a warning every single time it accesses contacts or location, don't allow third party apps outside the App Store to be granted ongoing permissions to anything, etc.
You bring up an excellent point, but that's a technological issue that should be solved with technological barriers.
An app shouldn't be able to download any private data without explicit user permission, but these restrictions should apply to every app, regardless of where it comes from. To be more specific, users should have complete control over every permission and have an easy way to audit their usage.
Sane security models don't rely on some app reviewer magically catching malicious behavior in an opaque review process where they don't even have access to the source code, much less the ability to review it in detail.
- huytersd 3y agoWhen you jailbreak your iPhone, all you’re doing is running external software on it. I can easily see this becoming commonplace especially with an ecosystem like Apple where people have been sheltered for so long they’re not as wary as say an android user.
- dns_snek 3y agoI wouldn't compare sideloading to jailbreaking at all, they have nothing in common besides both allowing you to run apps from 3rd party sources. Sideloading should be an officially supported mechanism and safely allow any app to operate within the confines of the existing sandbox. Jailbreaking is more like taking a sledge hammer to the sandbox and other technological barriers, once you break them down, privacy and security can't be guaranteed anymore. It's why I stopped rooting my personal Android devices.
- jedberg 3y ago> An app shouldn't be able to download any private data without explicit user permission, but these restrictions should apply to every app, regardless of where it comes from. What I'm saying is that it already happens for apps from the App Store, where it asks you to allow access to contacts for example. But one of your choices is "always allow". I'm saying for third party store apps, they remove the "always allow" option. Make you approve it every time, to remind you that it's happening.
- dns_snek 3y agoI don't see any justifiable privacy/security angle here, but it sounds like something Apple would try to pull.
- CogitoCogito 3y agoWhy is your default assumption that Apple is more trustworthy? It certainly isn’t my default assumption.