|
|
|
|
|
by nodamage
2103 days ago
|
|
> The security in iOS is tied to the sandboxing model - not the app store. I disagree. Sandboxing is designed to prevent your phone from being compromised but it doesn't prevent bad actors from using legitimate APIs in malicious ways. As an example, the App Store review guidelines enforce certain privacy restrictions such as not allowing third-party analytics or advertising in apps designed for children. This is not something that is intended to be enforced via sandboxing. Edit: As another example, consider an app that might request access to your contacts for a legitimate purpose (like messaging), but then secretly transmits and stores that data for an alternative purpose (like selling your contacts to third parties). Also possible within the sandbox but forbidden by the review guidelines. Now, I'm not saying the review process is going to catch all abuses of legitimate APIs ahead of time, but at least there is an enforcement mechanism if the bad actor gets caught. |
|