3 ms·
If you reviewed at the fraud listing[1] and had no knowledge of the LastPass app, I'm not sure you would know it was a copy. I worked on the App Store and Musi
by bradly 3y ago
If you reviewed at the fraud listing[1] and had no knowledge of the LastPass app, I'm not sure you would know it was a copy.
I worked on the App Store and Music at Apple, but I have no idea about the app review process.
1. https://blog.lastpass.com/wp-content/uploads/sites/20/2024/0 https://blog.lastpass.com/wp-content/uploads/sites/20/2024/0...
- saurik 3y agoIf you aren't putting the effort in to verify anything or doing enough research to even like, see if there is an existing app or that this app is related to the real website, then you simply can't claim--as Apple does--to be screening the apps that are submitted for scale. Like, are you suggesting that the goal of the App Store's walled garden is merely to prevent obvious scams?!
- bradly 3y ago> see if there is an existing app or that this app is related to the real website I’m still not sure what you are suggesting a reviewer unfamiliar with LastPass to know.
- saurik 3y agoI am expecting the reviewer to spend a moment at least searching their own store for LastPass, in addition to searching Google and checking the credibility of the submitter. Why, pray tell, do you think the reviewer even deserves to exist if they cannot block this sort of scam, due to something as trivial a reason as "they hadn't personally heard of LastPass"? There is a good reason why the FTC has finally decided to call bullshit on companies like Apple who claim their centralized closed ecosystem and resulting anti-competitive market manipulation is "required" for safety / security: you even used to work for Apple, and are essentially admitting they can't possibly do this function!!
- bradly 3y agoThis is human judgment. There are going to be failures. I believe a closed ecosystem is safer. You do not. Great! Let's each support the company that gives us that. <3
- saurik 3y agoThat really isn't sufficient here, as you are lying to the people who are putting their trust in you: a reviewer who is claiming to protect users from scams who won't even put in the token effort to learn what LastPass is before accepting it is simply not doing the role they claimed to be doing. The reasonable response here from people at Apple should be more like "this individual reviewer was negligent in their duties and has been reprimanded appropriately; additionally, we are attempting to prevent this kind of mistake from happening in the future with better training and more redundancy in the review process", not "what do you expect? how could the reviewer possibly know what LastPass is?". Like, do I believe an open ecosystem is better? Of course! But that isn't my argument here, today, on this thread. I am saying that, assuming the benefits claimed of the closed ecosystem are legit, Apple is not just doing a half-assed job: you are actively defending that half-assed job by saying it somehow isn't possible to do better, even when that obviously isn't the case... do remember that this was actually my job for a while! If you had submitted this kind of scam to Cydia, I guarantee I would have put enough effort in to at least learn what LastPass was and verify your involvement in the company before rubber-stamping a product that used its trademark! (Which, incidentally, maybe finally explains why the independent UCSB research done on this actually showed Cydia offered a safer curated core ecosystem than Apple... we actually gave a shit about what we promised to do.)
- smoldesu 3y agoYour first two sentences contradict with the third. How can you honestly defend a manually-vetted process that doesn't catch surface-level scams that even a Linux packager would catch?