this post was submitted on 21 Feb 2024
86 points (95.7% liked)

Apple

17238 readers
127 users here now

Welcome

to the largest Apple community on Lemmy. This is the place where we talk about everything Apple, from iOS to the exciting upcoming Apple Vision Pro. Feel free to join the discussion!

Rules:
  1. No NSFW Content
  2. No Hate Speech or Personal Attacks
  3. No Ads / Spamming
    Self promotion is only allowed in the pinned monthly thread

Lemmy Code of Conduct

Communities of Interest:

Apple Hardware
Apple TV
Apple Watch
iPad
iPhone
Mac
Vintage Apple

Apple Software
iOS
iPadOS
macOS
tvOS
watchOS
Shortcuts
Xcode

Community banner courtesy of u/Antsomnia.

founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] B0rax@feddit.de 10 points 6 months ago (1 children)

...do you know what enforces all of that?

The App store...

Umm… no? The phone operating system (iOS) enforces sandboxing. You can not run anything outside the sandbox without some exploit, at which point we have a completely new discussion.

[–] GlitterInfection@lemmy.world -2 points 6 months ago* (last edited 6 months ago)

Look up code signing and entitlements. This is a compile-time thing and an App store validation thing.

Regardless, what are you even arguing?

All of the sandboxing and entitlements stuff boils down to asking the user for permissions to access the data I described.

An app designed to look exactly like Facebook or Tik-tok, installed from a nefarious or less secure app store would reasonably expect to access contacts, the mic and camera, the username and password for that app, and a lot of other data that it can send to a server and use in ways that will negatively affect lots of people.