Apple's Craig Federighi Says Sideloading on iPhone Would Open the Floodgates to Malware

[MacRumors]

Apple's software engineering chief Craig Federighi today expressed his opposition to a provision in Europe's proposed Digital Markets Act that would require the iPhone to allow sideloading of apps outside of the App Store.

Speaking at the Web Summit conference in Portugal, Federighi said sideloading would result in the "floodgates" opening to malware.

Federighi said that while the Digital Markets Act has an "admirable mission" to promote competition and ensure that users have choice, he believes that the provision requiring sideloading would be a "step backwards" that takes away a user's choice of a "more secure platform" in iOS compared to Android.

"As an engineer who wants iPhone to stay as secure as possible for our users, there is one part I worry about, and that's the provision that would require iPhone to allow sideloading," said Federighi. "In the name of giving users more choice, that one provision would take away user's choice of a more secure platform."

Federighi addressed a common suggestion that Apple should at least give users an option to allow sideloading, arguing that even if users have no intention of sideloading, they could be "routinely coerced or tricked into doing it."

Many of Federighi's talking points were ones that Apple previously touched on in an in-depth document shared last month.

A replay of Federighi's appearance is available on LinkedIn.

Article Link: Apple's Craig Federighi Says Sideloading on iPhone Would Open the Floodgates to Malware

 

[Think|Different]

It’s true. And we all know it. Even if you want differently.

 

[mookc1]

Apple's system isn't perfect, but for the most part, it works. Keep the loop closed!

 

[AngerDanger]

Yep, this is exactly why you can't side load in macO—erm…

 

[osx'r]

It’s a fair point, but the option should be given to the people who purchase the hardware.

If they want to implement limitations on warranty coverage or support, that’s their prerogative.

 

[ghostface147]

The Mac doesn’t have these issues. Sure android has malware from time to time, but are the floodgates really open? Nope. Give the users the choice and if they side load and their phone craps out, limit warranty or something.

 

[contacos]

A) no one is forced to sideboard
B) just make it an opt in toggle hidden in some developer settings that no average user is ever going to bother even opening and maybe add like two ARE YOU REALLY SURE YOU WANT TO ENABLE IT pop ups.

 

[mi7chy]

In other words, they want to control how you use your device that you own so basically treating it as a fully-paid lease.

 

[XXPP]

He is 100% right. Sideload destroy iOS.

 

[Techwatcher]

I mean he's not wrong. Apple just needs to stick to their core privacy values to not look like hypocrites.

People choose iOS BECAUSE it's a better working closed ecosystem. You want a free-for-all OS where submitted App Store apps aren't reviewed then go get yourself an Android phone.

 

[KaliYoni]

Federighi addressed a common suggestion that Apple should at least give users an option to allow sideloading, arguing that even if users have no intention of sideloading, they could be "routinely coerced or tricked into doing it."

That's right. Attacks and exploits should be limited to state actors and alumni of military intelligence units only!

 

[jz0309]

Yup, keep it closed.

 

[dwaltwhit]

Federighi addressed a common suggestion that Apple should at least give users an option to allow sideloading, arguing that even if users have no intention of sideloading, they could be "routinely coerced or tricked into doing it."

What if, and I am no software engineer, it was an option when setting up a device. Like here is what sideloading is. If you would like to be able to do this, click this box, if not, click not now." I would think a strong majority would pick no initially, but if they found an app they really wanted or needed, they could change it after seeing an explanation of it.

 

[DHagan4755]

Given the fact that I've literally watched people on their Mac click things without really looking at what they're clicking on, this would definitely happen on iOS/iPad OS. That said, I'm still in favor of allowing side loading on iOS/iPad OS, like you can on the Mac. Some people's ignorance shouldn't prevent the rest of us from responsibly side loading software.

 

[jz0309]

It’s a fair point, but the option should be given to the people who purchase the hardware.

If they want to implement limitations on warranty coverage or support, that’s their perogative.

Except, there is far less than 1% of the iPhone user base that is tech savvie enough to understand it, the vast majority just clicks away in their social media apps

 

[Cloudane]

Shh, don't tell him about altstore...

(No seriously, if they close that loophole I'm off to 'droid again. The official Youtube app without ad blocking or sponsorblock is unbearable)

 

[XXPP]

A) no one is forced to sideboard
B) just make it an opt in toggle hidden in some developer settings that no average user is ever going to bother even opening and maybe add like two ARE AOU REALLY SURE YOU WANT TO ABLE IT pop ups.

A.You are wrong. Every company, every bank, every greedy company will force you to download the app from an external store.
B. In my country, thieves thoroughly instruct victims how to disable android security and install fake bank applications. Hundreds of millions of losses. On iOS, this was impossible.

 

[Eorlas]

weird, because even to this day with jailbreaking, this is a non issue.

but yall keep believing it just because he said so

 

[HeavenDynamic]

watching the presentation… dang, in-person events are so much better than the robotic virtual ones

 

[citysnaps]

It's been nice not having to worry (too much) about malware while owning an iPhone over the last dozen or so years. I'm happy with the App Store for apps.

If people want to jailbreak and side-load apps, they're responsible, without any assistance from Apple, if things go wrong.

 

[darkpaw]

A) no one is forced to sideboard

No, but if it's possible, there will be drive-by attacks whereby apps are side loaded when you just visit a website, or receive a text message.

If side loading were an option, and someone enabled it, then Apple should refuse to provide any after-purchase service for software issues. Right now, if you jailbreak your iPhone Apple don't have to help you out when it goes wrong. If Apple implement a switch and you choose to enable it, you should be informed that you lose any right to software service from Apple. It's probably the only way of allowing it, but even then, who's to say some side-loaded app doesn't cause other issues that affect other users, i.e. sends spam messages to contacts? Why should Apple open the door to that experience?

 

[XXPP]

In other words, they want to control how you use your device that you own so basically treating it as a fully-paid lease.

In other words, they they protect millions of people.

 

[Lounge vibes 05]

Malware wouldn’t be the biggest concern for me, I don’t think sideloading apps would be the worst idea.
But for the love of everything, Apple please, please, please don’t do that.
Not because of any privacy concerns or protections or whatever, just because I don’t feel like having the same conversation with every family member that I’ve had to have when it comes to the Mac.
“No grandma, you don’t get to Facebook through the Mac App Store.
Yes, you have to open the DMG before you drag the file into your applications folder.
No, just because the application disappeared from your bottom bar doesn’t mean that all your files are erased.”
Already imagining the major increase in phone calls to Apple support because no one knows how to use something that isn’t the App Store

 

[Cosmosent]

NOT a BIG fan of side loading, but ALSO, NOT a fan of the Status Quo !

Apple needs to become Transparent with the per-Category Revenue Numbers, ON a weekly basis, & needs competition, at MIN, WRT "App Discovery" !

Unless/Until Apple moves away from its Total & Complete Stranglehold on App Discovery, this App Dev will be a proponent of Sideloading !

ONLY way to get Apple to get their act together !

 

[DHagan4755]

What if, and I am no software engineer, it was an option when setting up a device. Like here is what sideloading is. If you would like to be able to do this, click this box, if not, click not now." I would think a strong majority would pick no initially, but if they found an app they really wanted or needed, they could change it after seeing an explanation of it.

Yes, I agree. Essentially the iOS/iPadOS version of this from the Security & Privacy pane of System Preferences on the Mac...