YOU ARE PROTECTED IN OUR WALL GARDEN! APPLE USES HAVE NO NEED T- oops, anyway YOU ARE PROTECTED.
this post was submitted on 08 Feb 2024
393 points (99.2% liked)
Technology
73602 readers
3096 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
How's that walled garden working out?
To be fair, things like this are pretty rare.
The more common experience is that those reviewers are anal as hell reject people for petty stuff. This malware guy lucked out and got the burned out app reviewer who didn’t look twice.
They’re rare but they’re very effective, because people have their guard down there.
Yeah, but as the poor sap who has been deemed “computer guy” for every elderly parent, aunt and uncle in the family, I think the Play and App Stores do a decent job of keeping malware in check.
It’s not perfect, but about once every year or two I have to put out a malware fire with a Windows laptop in the family. Dealing with the phones is less of a headache. Especially the iOS devices.
I wish iOS made it easier for people like me to remove those guardrails for my own needs, but for my 80 year old parents, I’m all for keeping them living in Apple and Google’s stores.
Apple can't hear you over the billions of dollars they're extorting.
I am surprised this happened, it’s the first case of anything like this that I have heard of. Do you know of any other cases?
Thanks for the links. I wasn’t aware of those, it sounds like PlayStore level of crapware in those cases, although you have to be REALLY dumb to be fooled by such obvious ones. But if you’re a very technically challenged person I am sure it is possible.
But the case with the LastPass clone is definitely much more malicious.
But if you’re a very technically challenged person I am sure it is possible.
Isn't that Apple's demographic? People get an iPhone or Mac because it just works and they don't have to worry about complexity and choice. Freedom can be paralyzing to people.
That’s oversimplifying it quite a lot. Many tech-educated users, developers, IT experts etc use MacOS/iOS. And many users of Android or other OSes have no idea what they are doing. All the large operating systems today are too wide to have a one demographic, they cover it all.
I work at an MSP and while it wasn’t LastPass, when you search “Microsoft Authenticator” in the app store there’s a similar looking Authenticator app that’s also blue, and because it’s an ad it shows up first. Had a user install that and was confused why they weren’t able to get MFA working.
I recently ran through an MFA enforcement campaign and had to build that app into my instructions. "Make sure it's the Microsoft authenticator, not the first result in the paid ad slot" because so many people were installing that app. I do deal with pretty low levels of tech savvy, but still.
The word for “savvyness” is “savvy”. It is both an adjective and a noun.
TIL
Hade a user doing the same thing, orr a couple of users.. apple just works, yeah sure
This is the best summary I could come up with:
Bad actors could potentially utilize the new regulation to trick consumers into buying subscriptions that are difficult to cancel.
When introducing its plan for DMA compliance, Apple wrote, “The new options for processing payments and downloading apps on iOS open new avenues for malware, fraud and scams, illicit and harmful content, and other privacy and security threats.”
What’s more, it’s upsetting to learn that LastPass had to warn customers publicly about a fake app that never should have been published in the first place.
“Our threat intelligence team posted a blog yesterday to raise awareness and help inform the public and our customers of the situation.
We are in direct contact with representatives from Apple, and they have confirmed receipt of our complaints, and we are working through the process to have the fraudulent app removed.”
Hoff added that the company is working with Apple to “understand more broadly how an application like this passed their normally rigorous security and brand protection mechanisms.
The original article contains 684 words, the summary contains 162 words. Saved 76%. I'm a bot and I'm open source!
Its beyond irresponsible it wasn't pulled the moment the most recent revelations came about. It also made me wonder if Apple "sees" certain fields of your keychain items, in-line with their conflation of convergent encryption as e2ee and other assorted privacy antics
Why would you assume they "see" certain keychain fields based on the article?
I'm glad I wasn't the only one wondering that.
“Because APPLE BAAAD”