Hacker News Reader

Comment by patapong | Hacker News Reader

Restricting updates of apps after the grace period seems risky from a security perspective... It could leave apps with critical vulnerabilities in circulation for too long.

View on HN

Right, so in order to avoid this security risk it is imperative you only use the Apple app store.

What is the name for this behavior? A protection racket?

Tim Cook chomping on a cigar: "It'd be a shame if something unfortunate was to happen to those nice apps of yours..."

"Nice device you gotz there. Wud be a real shame if some sort of malicious-like character wud getz his hands on it. Capeesh?"

Remember that this is an artificial limitation imposed by Apple, not by the EU.

For whatever it's worth, I would expect any security vulnerability in an iOS app to be a vulnerability of iOS itself, and not the app.

By your logic Unix is insecure just because an admin is allowed to install a trojan? The OS itself cannot stop the user from installing malicious software.

You are not an admin of the iphone unless you jailbreak it

You have enough “admin” access to install a trojan.

What iOS trojan are you referring to that is not a vulnerability of iOS itself?

Phishing apps posing as trusted sources (ie a fake banking app), a key logging browser, anything pertaining to trust. None of these are vulnerabilities to the OS itself.

All sms, phone calls and websites can be used to scam people.

On iOS, "users" are not "admins"

iOS has a significantly different security model than 'Unix'. iOS apps being significantly more sandboxed and restricted, technically, prevents many things an 'admin' could otherwise do.

Just disable the apps, then the vulnerabilities don’t matter.

Eh? That can't be right! I thought Apple cared about their customers? /S

Reply on news.ycombinator.com