Apple

17597 readers

81 users here now

Welcome

to the largest Apple community on Lemmy. This is the place where we talk about everything Apple, from iOS to the exciting upcoming Apple Vision Pro. Feel free to join the discussion!

Rules:

No NSFW Content
No Hate Speech or Personal Attacks
No Ads / Spamming
Self promotion is only allowed in the pinned monthly thread

Lemmy Code of Conduct

Communities of Interest:

Apple Hardware
Apple TV
Apple Watch
iPad
iPhone
Mac
Vintage Apple

Apple Software
iOS
iPadOS
macOS
tvOS
watchOS
Shortcuts
Xcode

Community banner courtesy of u/Antsomnia.

founded 2 years ago

MODERATORS

MichelleG

RoyalEngineering

thisisdee

Meta and Microsoft ask EU to reject Apple's new app store terms (9to5mac.com)

submitted 10 months ago by [email protected] to c/apple_enthusiast

50 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] abhibeckert 14 points 10 months ago* (last edited 10 months ago) (1 children)

That way all it will take to infect my parents’ phones with malware capable of scraping copious amounts of my data will be normal phone usage that Apple can’t protect against!

Um... What? iPhone apps run in a sandbox. They can't access anything. They can't even run at all unless the user launches the app or interacts with a notification. Background running is strictly limited to things like music playback with very few exceptions (exceptions which are taken away if the user never launches the app).

And for the record, I don't own an android phone and never have.

[+] GlitterInfection -19 points 10 months ago* (last edited 10 months ago) (1 children)

...do you know what enforces all of that?

The App store...

Specifically it limits what APIs can and can't be used by apps and forces the use of entitlements to access features of the hardware.

Downvote if you want, but entitelements are part of the code signing process which this article is trying to avoid. And jailbroken apps already don't have the protections you're talking about.

It's not uncommon for people to datamine not public API all over Apple's frameworks and the only thing preventing the usage is App Store policies and static analysis tools.

[–] [email protected] 10 points 10 months ago (1 children)

...do you know what enforces all of that?

The App store...

Umm… no? The phone operating system (iOS) enforces sandboxing. You can not run anything outside the sandbox without some exploit, at which point we have a completely new discussion.

[–] GlitterInfection -2 points 10 months ago* (last edited 10 months ago)

Look up code signing and entitlements. This is a compile-time thing and an App store validation thing.

Regardless, what are you even arguing?

All of the sandboxing and entitlements stuff boils down to asking the user for permissions to access the data I described.

An app designed to look exactly like Facebook or Tik-tok, installed from a nefarious or less secure app store would reasonably expect to access contacts, the mic and camera, the username and password for that app, and a lot of other data that it can send to a server and use in ways that will negatively affect lots of people.