Hacker News Reader

Hacker News

Comment by jotux | Hacker News Reader

Full thread

jotux

Apple should ban the app for this, right?

http://danielamitay.com/blog/2015/5/29/shutting-down-a-500mm...

View on HN

If Apple applied their rules evenly across publishers, they would.

They are "too big to ban".

It's sad how true that is. Reminds me of the early days when Apple would ban all "sexy" apps, except Playboy and such.

Playboy has good articles...

Unlikely considering they work closely with Apple on integration with Twitter. Double standard sure but I doubt Apple cares.

Apple's integration is independent of the Twitter app, though.

Is there an API in iOS to get information about other apps? How is Twitter doing it? I thought all apps were 'sandboxed' in iOS.

Apps can register custom URL schemes to enable other apps to open them, pass them data and even deep-link to within them. There is an official API called canOpenUrl: which will let you check if a particular URL scheme is registered on a particular device. So that, along with a database of public URL schemes published by other apps, lets you detect which apps are installed.

I wasn't aware of this before but apparently you can also use sysctl() to check the names of running processes (which is less reliable as processes will get bumped off if the foreground app requires more memory).

More here: http://danielamitay.com/blog/2011/2/16/how-to-detect-install...

There is also private API that is not very difficult to hide, which gives you all the installed app bundle identifiers.

How would you hide calls to private APIs?

Hardcode the address on all known platforms and skip it on unknown ones, or disassemble a public function that calls it and figure out the address from there, or read the Mach-O headers and write your own dlsym, etc. etc.

Apple once blocked a updates for everyone using a common SDK because it had named a symbol something that happened to be the name of an unrelated private API, and the review process couldn't tell the difference. That implies things about the rigor of the review process.

Apparently Apple has closed the "canOpenURL" loophole: https://www.ihasapp.com/

You can

1.) Scan for custom URL schemes the applications register so you can open them from other apps or web URLs. 2.) Retrieve a list of currently running processes in the background

Apparently Apple will shut you down if you overuse the canOpenUrl method: https://www.ihasapp.com/

I hope so!

Reply on news.ycombinator.com