Hacker News Reader

How is Apple not addressing this? This seems like a pretty glaring hole in their tightly controlled environment. If the SDK is injecting code, shouldn’t that be an explicit permission?

View on HN

It's "inside" the application and the code is injected at build time, by the sounds of it.

Thanks for clearing that up. I wonder if developers actually know they are signing up for this when blindly dropping in the SDK, just to support FB login.

I’m surprised most popular apps haven’t learnt their lesson since this happened last month as well.

I mean what would they do?

Heavy restrictions on how apps use third party SDKs for signing in, forcing FB to change its policy of requiring the SDK for native apps which use FB to sign in.

And then reject new app updates which don’t follow the new rules.

Or just outright ban this spyware.

Yes because government officials know enough about technology to pass those types of laws.

I’m talking about Apple.

I’m not sure how you would word this to target the Facebooks of the world.

Especially if SDKs are statically linked.

An SDK that large must have an obvious signature. Block it.

Don't allow the files to install.

Block all communications.

Ban it completely except in the Facebook authored apps.

Q. E. D.

Reply on news.ycombinator.com