3 ms·

And yet, with all that wonderful "automated" malware checking Google is also now manually reviewing App. http://blog.lifars.com/2015/03/18/google-now-manually-

by x0054 11y ago

And yet, with all that wonderful "automated" malware checking Google is also now manually reviewing App. http://blog.lifars.com/2015/03/18/google-now-manually-reviews-apps-in-its-android-play-store/ http://blog.lifars.com/2015/03/18/google-now-manually-review...

lern_too_spel 11y ago
How does the addition of manual checks against the distribution policies change the fact that Google's malware checking is better than Apple's?
- x0054 11y ago
  I don't understand what makes you say that Google's malware checking system is superior to Apple's. Do you have a source for that? Do you have a source to the way Apple in general does their app vetting, or Google for that matter. At this point you are basically saying: "Google is better because I said so." Do you have evidence that Apple does NOT run an automated virus and malware scan, resource analysis, or any other automated malware detection on their apps before adding them to the queue to also be manually checked. Just because Apples does manual checking it does NOT mean that they completely forego automatic checking. Just like the fact that Google did automatic checking did not prevent them to also implement a manual checking system. Nowadays both companies do a pretty good job vetting App submissions, though Apple also filters on quality (sometimes) where as Google does not, but that's within each companies respective philosophies, and can be considered a strength or a weakness, depending on your own philosophy.
  - lern_too_spel 11y ago
    Do you have evidence that Apple does? They have made no claims that they do, instead continuously pointing to human vetting as their filter on malware, which is laughable. We all know that unskilled contractors stepping through some policy checklist aren't a legitimate protection against malware, but it's enough to fool people like Gruber, many bloggers, and you 14 hours ago before I pointed out your mistake.
    - x0054 11y ago
      If the only thing Apple does is simply pay people to poke around the app on an iPhone for a few minutes, then by that assertion there should be a stunning amount of Malware on the AppStore. I mean, all you have to do is place a time delay code, or a server side activation procedure, and you would be able to bypass all manual checks. What on earth makes you think that Apple does NOT use malware scanning. I mean, it's easy to setup, easy to implement, and cheep. This is why Google went to manual scanning first, and only later on went to human and AI assisted checks, which are harder and more expensive to setup. In any case, you made an assertion that Apple does NOT run automated scans, unlike Google. I asked for proof. Now you demand proof from me that they do. It doesn't work that way. You made an assertion first, you back it up. My proof is in the result. AppStore has next to no malware on it. PlayStore (now) is also very clean and safe. Google achieved this through combination of automated and manual vetting. Apple is notoriously silent about their process, other than advertising their one USP, which is no longer unique, but given if we use logic, we must assume that both companies use similar tools to achieve similar results. Your assertion that Apple is far less secure would suggest much more malware being live on the AppStore, and yet in my search on google I was only able to find a few older articles about researches being able to smuggle in custom written malicious code onto AppStore. Meanwhile, while searching for malware on iOS, google presented me this in a search result at some point: http://techcrunch.com/2015/02/03/new-adware-found-in-google-play-apps-with-millions-of-downloads/ http://techcrunch.com/2015/02/03/new-adware-found-in-google-... That's just one example from 2015. I don't think it's fair to check back to 2014 and prior, as back than Google Play Store was basically Wiled Wiled West.
      - lern_too_spel 11y ago
        You've made so many mistakes of logic and fact, it's hard to figure out where I should begin. First, itself "wild" and not "wiled". Second, Apple doesn't allow "virus scanners," which is why you'll never hear companies like Sophos talking about malware on iOS -- they have nothing to gain. If you are in the right circles, you know there is plenty of malware on the App Store -- it's significantly easier to get it on the App Store than it is to get it on the Play Store. The main deterrent to malware on both platforms is the requirement that the app publisher have a credit card, which the stores both verify. If a publisher behaves badly, their identity is already known through their bank. Finally, you seem to be confusing manual scanning, static analysis, dynamic analysis, and human review to the point where it's hard to even figure out what you're claiming. Google implemented dynamic analysis long before 2014 (your "wiled west"), which Apple very clearly still hasn't done.

by x0054 11y ago

lern_too_spel 11y ago

How does the addition of manual checks against the distribution policies change the fact that Google's malware checking is better than Apple's?

x0054 11y ago
I don't understand what makes you say that Google's malware checking system is superior to Apple's. Do you have a source for that? Do you have a source to the way Apple in general does their app vetting, or Google for that matter. At this point you are basically saying: "Google is better because I said so." Do you have evidence that Apple does NOT run an automated virus and malware scan, resource analysis, or any other automated malware detection on their apps before adding them to the queue to also be manually checked. Just because Apples does manual checking it does NOT mean that they completely forego automatic checking. Just like the fact that Google did automatic checking did not prevent them to also implement a manual checking system. Nowadays both companies do a pretty good job vetting App submissions, though Apple also filters on quality (sometimes) where as Google does not, but that's within each companies respective philosophies, and can be considered a strength or a weakness, depending on your own philosophy.
- lern_too_spel 11y ago
  Do you have evidence that Apple does? They have made no claims that they do, instead continuously pointing to human vetting as their filter on malware, which is laughable. We all know that unskilled contractors stepping through some policy checklist aren't a legitimate protection against malware, but it's enough to fool people like Gruber, many bloggers, and you 14 hours ago before I pointed out your mistake.
  - x0054 11y ago
    If the only thing Apple does is simply pay people to poke around the app on an iPhone for a few minutes, then by that assertion there should be a stunning amount of Malware on the AppStore. I mean, all you have to do is place a time delay code, or a server side activation procedure, and you would be able to bypass all manual checks. What on earth makes you think that Apple does NOT use malware scanning. I mean, it's easy to setup, easy to implement, and cheep. This is why Google went to manual scanning first, and only later on went to human and AI assisted checks, which are harder and more expensive to setup. In any case, you made an assertion that Apple does NOT run automated scans, unlike Google. I asked for proof. Now you demand proof from me that they do. It doesn't work that way. You made an assertion first, you back it up. My proof is in the result. AppStore has next to no malware on it. PlayStore (now) is also very clean and safe. Google achieved this through combination of automated and manual vetting. Apple is notoriously silent about their process, other than advertising their one USP, which is no longer unique, but given if we use logic, we must assume that both companies use similar tools to achieve similar results. Your assertion that Apple is far less secure would suggest much more malware being live on the AppStore, and yet in my search on google I was only able to find a few older articles about researches being able to smuggle in custom written malicious code onto AppStore. Meanwhile, while searching for malware on iOS, google presented me this in a search result at some point: http://techcrunch.com/2015/02/03/new-adware-found-in-google-play-apps-with-millions-of-downloads/ http://techcrunch.com/2015/02/03/new-adware-found-in-google-... That's just one example from 2015. I don't think it's fair to check back to 2014 and prior, as back than Google Play Store was basically Wiled Wiled West.
    - lern_too_spel 11y ago
      You've made so many mistakes of logic and fact, it's hard to figure out where I should begin. First, itself "wild" and not "wiled". Second, Apple doesn't allow "virus scanners," which is why you'll never hear companies like Sophos talking about malware on iOS -- they have nothing to gain. If you are in the right circles, you know there is plenty of malware on the App Store -- it's significantly easier to get it on the App Store than it is to get it on the Play Store. The main deterrent to malware on both platforms is the requirement that the app publisher have a credit card, which the stores both verify. If a publisher behaves badly, their identity is already known through their bank. Finally, you seem to be confusing manual scanning, static analysis, dynamic analysis, and human review to the point where it's hard to even figure out what you're claiming. Google implemented dynamic analysis long before 2014 (your "wiled west"), which Apple very clearly still hasn't done.