3 ms·

I hear you. We also track security flaws in apps and users can see all of their apps' issues. We don't yet have a way to separate which issues you can see. We'

I hear you. We also track security flaws in apps and users can see all of their apps' issues. We don't yet have a way to separate which issues you can see. We're trying to figure out the right balance between allowing anybody to quickly look up an app but not becoming the hammer that end users take to bash developers. A few months ago, we found 25,000 iOS apps with an SSL flaw and allowed anybody to look up which ones. There were a lot of uninformed complaints to developers, even if the app only used the library to load images or some other non-sensitive use. Suggestions welcome on how to balance this, and we'll keep trying to find the right one.

mikeash 11y ago
If it's mixed up with security issues then that is certainly troublesome. I think this is a question of context. My first exposure to your company was with this blog post, and with that it seems like you're trying to gather data to tell people if their apps crash. But really you're focused on security and this is a side benefit, if I understand it correctly. What about making available a big text file with the names or identifiers of apps affected by this problem? Or if you can whip up a quick search interface (I know, always sounds easier than it is) to just this list of apps, maybe provide that as an alternate. Your experience with that SSL flaw is interesting. I'm guessing/hoping it wouldn't apply here because the apps really will fail when you say they will, but I see where you'd want to be cautious. Anyway, thanks for explaining the context and providing this service.
- NateLawson 11y ago
  Yeah, we'll see about making a one-off just for searching for this flaw. We add issues to our index constantly, and many are security-related but not this one. Thanks for the tips, and we'll try to do better next time.

3 ms·

I hear you. We also track security flaws in apps and users can see all of their apps' issues. We don't yet have a way to separate which issues you can see. We'

by NateLawson 11y ago

mikeash 11y ago
If it's mixed up with security issues then that is certainly troublesome. I think this is a question of context. My first exposure to your company was with this blog post, and with that it seems like you're trying to gather data to tell people if their apps crash. But really you're focused on security and this is a side benefit, if I understand it correctly. What about making available a big text file with the names or identifiers of apps affected by this problem? Or if you can whip up a quick search interface (I know, always sounds easier than it is) to just this list of apps, maybe provide that as an alternate. Your experience with that SSL flaw is interesting. I'm guessing/hoping it wouldn't apply here because the apps really will fail when you say they will, but I see where you'd want to be cautious. Anyway, thanks for explaining the context and providing this service.
- NateLawson 11y ago
  Yeah, we'll see about making a one-off just for searching for this flaw. We add issues to our index constantly, and many are security-related but not this one. Thanks for the tips, and we'll try to do better next time.