I hacked a dating app (and how not to treat a security researcher)

I thought Apple was checking apps? How did this go through? In any sane jurisdiction exposing PII like that is illegal.

nobody does a free security checkup xD not even apple

free? I thought they still had their 30% racket and wait while we review 3 months pipeline going for their walled gardens

Apple mainly checks for obvious malware API calls on device, it would really be out of its scope to check the backend security for every app ever.

yeah, no. security evaluations cost a ton, and they take time. apple is doing nothing at all, just charging for being in a premium market.

I don't think the App Store provider should be blamed for a security posture that is just wrong by design. The company is responsible to guarantee a meaningful degree of security for their user data.

This is why Apple security theater leads people to a false sense of security.

Better to make secure operating systems that inform users of bad access patterns and let the developers be free to produce.

Nothing protects you from giving info to a broken backend though, so people should be more cautious and repercussions for insecure backends should be higher.

"Premium"

Apps on the app store are hardly much better than anywhere else.

Remind me what the 30% markup is for, again?

The "premium" presumably is the market apple's commands and nobody else's does

iOS users still spend more dollars per average in apps than android ones even if android has more users i think ?

Also true. But it's just sad to see the average quality of an app has gone way down over the years.

Didn't cost a ton for this article's author.

Marketing and distribution.

What marketing?