Apple's 'incredibly private' Safari not so private in Europe
www.theregister.com
Infosec eggheads find iGiant left EU iOS 17 users open to being tracked around the web

Apple’s grudging accommodation of European antitrust rules by allowing third-party app stores on iPhones has left users of its Safari browser exposed to potential web activity tracking.

Developers Talal Haj Bakry and Tommy Mysk looked into the way Apple implemented the installation process for third-party software marketplaces on iOS with Safari, and concluded Cupertino’s approach is particularly shoddy.

  • MotoAsh@lemmy.worldEnglish
    6·
    8 months ago

    Does it even use secure DNS by default? No? Then it cannot be much more secure than any other browser, and their integrated Apple IDs make their users more identifiable, so… A lie even before this app store mess.

  • Clent@lemmy.worldEnglish
    33·
    8 months ago

    App Stores need to track the user to determine if the user has installed the website app before.

    The EU demanded Apple allow third party stores and if Apple didn’t implement these with the same feature set available to Apples store, the complaints would be focused there instead.

    There are people who like to pick on Apple and most of them are technologically illiterates. This was true long before Apple become insanely profitable with the iPhone. It will continue to be true for the foreseeable future.

    Haters need to hate. Apple haters are a distinct fetish.

    • BrikoXMEnglish
      51·
      8 months ago

      Apple claims to invest billions upon billions in R&D and you say they can’t develop a private way to ping the users. But the reality is that it’s just intentional failings on Apple part, so that they can continue to falsely claim regulations hurt privacy and security. If you read the full article and not just the headline, you would know that Apple doesn’t even bother to check the site origin or validate JWTs. That is not a mistake someone with years of experience would make, it’s intentional moves to make it less secure.