5 ms·

> Do note that this article fails to actually identify any threat here. From the article: > ...the app was likely created to act as a phishing app and steal c

> Do note that this article fails to actually identify any threat here. From the article: > ...the app was likely created to act as a phishing app and steal credentials. > If you have installed the fake LastPass app, you should immediately remove it and change your password at lastpass.com. It is then advised to perform the arduous task of resetting all passwords stored in your LastPass vault to be safe. Though one could argue that they have not _definitively_ proven that this app is a threat through testing, it really is not much of a stretch of the imagination that a LastPass-lookalike would be used for phishing. This app is very clearly an illegitimate clone.

chrisjj 3y ago
> ...the app was likely created to act as a phishing app and steal credentials. That a fear, not a threat. > Though one could argue that they have not _definitively_ proven that this app is a threat Why bother arguing that? They haven't claimed any evidence, let alone proof. > it really is not much of a stretch of the imagination that a LastPass-lookalike would be used for phishing. App Store rightly does not ban apps on stretches of imagination.
- lapcat 3y ago
  > App Store rightly does not ban apps on stretches of imagination. Apple has removed the app: https://techcrunch.com/2024/02/08/a-fake-app-masquerading-as-password-manager-lastpass-just-got-pulled-from-the-app-store/ https://techcrunch.com/2024/02/08/a-fake-app-masquerading-as...
  - chrisjj 3y ago
    > Apple has removed the app Fake news. Article does not say Apple removed it. On the contrary: "whether by Apple or the fake app’s developer is yet unclear — Apple has not commented."
    - lapcat 3y ago
      Apple never comments on that, but somehow magically every single time a scam app makes the news media, the app disappears from the App Store.
      - chrisjj 3y ago
        You've still not shown this is a scam app.
        lapcat 3y ago
        I don't need to show that. It's obvious to everyone except you... and Apple's app reviewers. Maybe you're one of them? Your view is very strange though, because if the app were not a scam, then why would the developer voluntarily pull the app from the store?
        chrisjj 3y ago
        > I don't need to show that. Agreed. And readers can draw the obvious conclusion from your failure to do so. > if the app were not a scam, why would the developer voluntarily pull the app from the store? To prevent further bad publicity, obviously.
        lapcat 3y ago
        > And readers can draw the obvious conclusion from your failure to do so. People all over the internet today in various discussion forums, including on HN in multiple submissions, have already drawn the obvious conclusion, without having read my comments, and their conclusion is almost universally the opposite of yours. > To prevent further bad publicity, obviously. It prevents any sales, which is the point of selling in the App Store. But why do you think there's so much bad publicity, if there's nothing wrong with the app? It's unclear why it even matters who exactly removed the app from the App Store, because Apple's rules do not allow developers to deceive App Store users, and you've already more or less admitted that the app is deceptive. https://news.ycombinator.com/item?id=39308175 https://news.ycombinator.com/item?id=39308175 Although I don't know how you can justify saying that it's "at most" deception rather than "at least" deception, because "Trusted by over 1+ million users and 10,000+ businesses" is a flat out lie. Thus, even if the developer refused to remove the app, Apple should have anyway.

chrisjj 3y ago

> ...the app was likely created to act as a phishing app and steal credentials. That a fear, not a threat. > Though one could argue that they have not _definitively_ proven that this app is a threat Why bother arguing that? They haven't claimed any evidence, let alone proof. > it really is not much of a stretch of the imagination that a LastPass-lookalike would be used for phishing. App Store rightly does not ban apps on stretches of imagination.

lapcat 3y ago
> App Store rightly does not ban apps on stretches of imagination. Apple has removed the app: https://techcrunch.com/2024/02/08/a-fake-app-masquerading-as-password-manager-lastpass-just-got-pulled-from-the-app-store/ https://techcrunch.com/2024/02/08/a-fake-app-masquerading-as...
- chrisjj 3y ago
  > Apple has removed the app Fake news. Article does not say Apple removed it. On the contrary: "whether by Apple or the fake app’s developer is yet unclear — Apple has not commented."
  - lapcat 3y ago
    Apple never comments on that, but somehow magically every single time a scam app makes the news media, the app disappears from the App Store.
    - chrisjj 3y ago
      You've still not shown this is a scam app.
      - lapcat 3y ago
        I don't need to show that. It's obvious to everyone except you... and Apple's app reviewers. Maybe you're one of them? Your view is very strange though, because if the app were not a scam, then why would the developer voluntarily pull the app from the store?
        chrisjj 3y ago
        > I don't need to show that. Agreed. And readers can draw the obvious conclusion from your failure to do so. > if the app were not a scam, why would the developer voluntarily pull the app from the store? To prevent further bad publicity, obviously.
        lapcat 3y ago
        > And readers can draw the obvious conclusion from your failure to do so. People all over the internet today in various discussion forums, including on HN in multiple submissions, have already drawn the obvious conclusion, without having read my comments, and their conclusion is almost universally the opposite of yours. > To prevent further bad publicity, obviously. It prevents any sales, which is the point of selling in the App Store. But why do you think there's so much bad publicity, if there's nothing wrong with the app? It's unclear why it even matters who exactly removed the app from the App Store, because Apple's rules do not allow developers to deceive App Store users, and you've already more or less admitted that the app is deceptive. https://news.ycombinator.com/item?id=39308175 https://news.ycombinator.com/item?id=39308175 Although I don't know how you can justify saying that it's "at most" deception rather than "at least" deception, because "Trusted by over 1+ million users and 10,000+ businesses" is a flat out lie. Thus, even if the developer refused to remove the app, Apple should have anyway.