Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Who said anything about bugs? The point is to do something proactive to stop apps that don't conform to your policies (whichever they may be - maybe you don't allow collection of data, or using a specific interface, definitely not malware, etc.) instead of just reacting, and even that too late.

Apple is at one extreme blocking even legitimate things for obscure and esoteric reasons. Google is at the other, letting all kinds of crap in the store only to review it later, maybe. [1]

I'm sure my remark ruffled feathers on some Android fans but it doesn't make it less true.

[1] https://venturebeat.com/2018/01/30/google-play-removed-70000...



The point is to do something proactive to stop apps that don't conform to your policies (whichever they may be - maybe you don't allow collection of data, or using a specific interface, definitely not malware, etc.) instead of just reacting, and even that too late.

I’m saying that with millions of apps in the store and seeing that all app testing is black box testing, the reviewers are not going to catch most things. The operating system itself should not allow certain things. There is no reason that most of the permissions that SpyPhone needs should be allowed by Android.


Then to what would you attribute the fact that the AppStore is much better curated than the Play Store? Fewer application submissions? More honest coders?

It's a two part answer probably: Apple's store policies are discouraging some of the unwanted behavior, and the actual enforcement of those policies is stricter. Not just a second though.


Most of the “honesty” comes from iOS and it’s just a better thought out model than Android when they introduce new features.

Ad Blockers - the framework is built in a way that third party ad blockers can be installed but they don’t have access to your browsing history. They basically just submit a JSON file that is integrated into Safari and some types of web views

Third party keyboards - because of the opportunity of keyloggers, you have to explicitly go into settings to install one, then you have to give it permission to access the network as a separate step after a huge warning, and even then when you enter a password, iOS switches back to the default keyboard.

SafariViewController - with traditional embedded webviews, the hosting app has complete access to everything you are doing. The SafariViewController runs as a separate process.

The only way that an app on Android can (could?) know if it should stop playing sound was to ask for full permissions to access your phone state.

Why does any app need full access to my storage like Android allows? With iOS, an app has full access to its own file store in iCloud, you can grant it access to your photo library or music library (read only) but it’s very explicit. Any other document outside of those, the user explicitly tells it what file to open.

Why would I ever give a third party app access to my SMS messages? Why is that even an option on Android?

I download stuff without regard on my iPhone because I know that it can’t do anything crazy.

Even if SpyPhone didn’t go through any review process, it’s a track surface is limited on non jailbroken iOS devices.


> Most of the “honesty” comes from iOS and it’s just a better thought out model than Android

That's essentially what I had to say. Apple enforces these policies - and sometimes will go overboard. I still very much prefer it to what Google does where as a user I feel they are completely neglecting to "take my side". I am not their valued customer, I am just a source of personal data.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: