[Hokusai]

> I'm thinking of the dodgier companies. Right now I have little to worry about when I leave my kid playing a game, all the payment need to go through Apple or at least the offending app will not stay up for too long.

Nothing stops dodgier companies to ask your kid a credit card number.

If you trust an app and it charges you in a dodgy way, you can claim that charge with your credit company.

On-line transactions work in computers, it is not different in a phone. Phones are just computers nowadays.

A tech company that is your bank, your ID, your messaging system, your location system,... is 1984 level of scary.

[closeparen]

The App Store review process stops it.

To dispute charges that were indeed made by a member of your household, you usually have to file a police report against them.

The method of paying for things online by shared secret numbers is insane. Phones permit much more reasonable payments architectures, since they can sign transactions with their TPMs instead of spraying your credit card number everywhere. We should see phones replace credit card entry even for transactions started on desktops.

[Hokusai]

> We should see phones replace credit card entry even for transactions started on desktops.

The two banks I use already have this, as many other banks. I already have to trust my bank, they literally have my money. I pay my taxes and sign them thru my bank, I do transfers, I pay subscriptions, etc. everything with my bank signature.

Apple is what is stopping more apps to use my bank signature to pay directly thru it. Apple is stopping more secure banking to able to take a piece of the cake.

> The App Store review process stops it.

No, that is not how apple review process works. Many content is server-side. Pop-ups are send from the server to your game/app. Games and app have browsers that can render anything and communicate anywhere.

The App review process may catch some obvious things, but it cannot know what an app connected to the internet is going to do.

Even malware, that should be way easier to detect and stop , way easier than to stop a pop-up asking for your credit card, pass thru their system: https://www.wandera.com/ios-trojan-malware/

[judge2020]

> Even malware, that should be way easier to detect and stop , way easier than to stop a pop-up asking for your credit card, pass thru their system

Ah yes, one of the scarier trojans to hit your phone: click-jacking for ad fraud.

> The apps communicate with a known command and control (C&C) server to simulate user interactions in order to fraudulently collect ad revenue.

I'd download this malware any day over the actually-malicious Android malware that's out there: https://forensics.spreitzenbarth.de/android-malware/

[strbean]

Cool. That doesn't in any way counter the arguments you replied to regarding asking kids for credit card info.