4 ms·

The App Store review provides protections which are not a technical protections. Earlier someone talked about the failing of allowing a $50 subscription flashli

by dwaite 2y ago

The App Store review provides protections which are not a technical protections. Earlier someone talked about the failing of allowing a $50 subscription flashlight app into the store (dunno if they’d be able to find a citation). This was a failing of the expected business controls. There’s nothing technical to even be done to prevent these sorts of abuses. One example from a while back was banning an internal Facebook enterprise developer account because they were using it to install a VPN onto users devices for the purpose of monitoring user behavior for competitive market analysis. This is not anything that can be prevented by technical controls, and was only able to be published because enterprise profiles can deploy apps outside the store. Apple wants their customers to be safe. Third party marketplaces take that responsibility and control out of their hands. Apple stopped that VPN abuse immediately upon finding out about it. How long would it take for European regulators to force Facebook to turn off such a self published app of their own accord?

FireBeyond 2y ago
> Earlier someone talked about the failing of allowing a $50 subscription flashlight app into the store (dunno if they’d be able to find a citation). This was a failing of the expected business controls. How about LassPass, then? That made it onto the AppStore despite being designed to make money and steal credentials. Maybe not $50/month, though. I love one Apple apologist's remarks on that aspect: > Instead, the scam LassPass app tries to steer you to creating a “pro” account subscription for $2/month, $10/year, or a $50 lifetime purchase. Those are actually low prices for a scam app — a lot of scammy apps try to charge like $10/week. Emphasis mine. "Look, I know you got your credentials stolen, but at least you didn't also get scammed out of as much money as some other scammy apps!"
- dwaite 2y ago
  I am unsure your point - are you saying since the business controls are fallible, we should abandon them and have an internet's worth of potential side-loaded LastPass scam apps?

by dwaite 2y ago

FireBeyond 2y ago

> Earlier someone talked about the failing of allowing a $50 subscription flashlight app into the store (dunno if they’d be able to find a citation). This was a failing of the expected business controls. How about LassPass, then? That made it onto the AppStore despite being designed to make money and steal credentials. Maybe not $50/month, though. I love one Apple apologist's remarks on that aspect: > Instead, the scam LassPass app tries to steer you to creating a “pro” account subscription for $2/month, $10/year, or a $50 lifetime purchase. Those are actually low prices for a scam app — a lot of scammy apps try to charge like $10/week. Emphasis mine. "Look, I know you got your credentials stolen, but at least you didn't also get scammed out of as much money as some other scammy apps!"

dwaite 2y ago
I am unsure your point - are you saying since the business controls are fallible, we should abandon them and have an internet's worth of potential side-loaded LastPass scam apps?