Technology

37719 readers

114 users here now

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:

This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago

MODERATORS

alyaza@beehaw.org

TheRtRevKaiser@beehaw.org

gyrfalcon@beehaw.org

rs5th@beehaw.org

coldredlight@beehaw.org

Los@beehaw.org

SemioticStandard@beehaw.org

TheRtRevKaiser@kbin.social

remington@beehaw.org

189

Apple will require notarization for apps from third party app stores, and will disable updates for apps installed via third party app stores if staying outside EU (support.apple.com)

submitted 8 months ago by brie@beehaw.org to c/technology@beehaw.org

48 comments fedilink hide all child comments

As far as I can tell this basically means that all apps must be approved by Apple to follow their "platform policies for security and privacy" even if publishing on a third party app store. They will also disable updating apps from third party app stores if you stay outside the EU for too long (even if you are a citizen of an EU country, with an Apple account set to the EU region).

The idea that preventing app updates is in line with their claims of protecting security is utterly absurd. "Never attibute to malice what can be explained with stupidity," but Apple isn't stupid.

you are viewing a single comment's thread
view the rest of the comments

[–] eveninghere@beehaw.org 12 points 8 months ago* (last edited 8 months ago) (2 children)

What boggles my mind is that the level of sandboxing displayed in Apple's App Store is not really interpretable to me.

I also see something like "the developers indicated they do not collect sensitive information." Yeah, but why would they indicate otherwise if they were malicious parties?

Probably, the only way to get sort of assurance is to choose an open source project, but App Store doesn't guarantee that the code on Github matches the app in the Store.

[–] tesseract@beehaw.org 6 points 8 months ago

but App Store doesn't guarantee that the code on Github matches the app in the Store

This is why I like fdroid. They insist on building the app themselves, ensuring that it does indeed match what's on github. Now you need to trust only fdroid to do the right thing. Then again, if they do something bad, someone will recognize it.

[–] GissaMittJobb@lemmy.ml 2 points 8 months ago

You upload the binary to the App Store, and as a part of the release process they may inspect the binary to figure out what it's doing.

They of course don't do that for everything as it's a bit complicated to do for everything, but it can be an effective means to for example figure out when an app is calling an API in a prohibited manner.