Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
what if someone manages to get into your phone’s system, zero click exploit or whatever might exist (I got no clue), and of all the things they could tamper with now they get access to a new shiny switch that gives them access to start dumping new software and hiding it without even knowing.

Before said hypothetical hacker didn’t even have that switch to activate but now it would.

I’m quite illiterate on this so I’m just extrapolating, but if this is impossible or doesn’t make sense at all, then fine, I guess we could have that unhackable hard lock protected sideloading enabler switch.
If they are able to get into your phone then you’re already in trouble and sideloading becomes the least of your worries.
 
  • Like
Reactions: d686546s
If they are able to get into your phone then you’re already in trouble and sideloading becomes the least of your worries.
There’s a hypothetical nuclear power plant with the option to have or not have a “blow up” button, it could be useful at some another hypothetical situation.
The concern is that someone could hack into the nuclear power plant system and trick the button from the inside… but they put it anyway because “if they already hacked into the system, that button is the least of our concerns”.

Why go nuclear on this? Why have this yet another venue and disregard it all as “it’s not more insecure”?

I’m not against or in favor as much, I don’t really know, but no one has given a compelling explanation of how “security is left unchanged with or without side loading”. For all I know, it would be great to just launch a poll, see what people actually want… MR has poll-style posts.
 
  • Like
Reactions: Unregistered 4U
There’s a hypothetical nuclear power plant with the option to have or not have a “blow up” button, it could be useful at some another hypothetical situation.
The concern is that someone could hack into the nuclear power plant system and trick the button from the inside… but they put it anyway because “if they already hacked into the system, that button is the least of our concerns”.

Why go nuclear on this? Why have this yet another venue and disregard it all as “it’s not more insecure”?

I’m not against or in favor as much, I don’t really know, but no one has given a compelling explanation of how “security is left unchanged with or without side loading”. For all I know, it would be great to just launch a poll, see what people actually want… MR has poll-style posts.
Malware isn’t blowing up the power plant. Uninstall the offending apps or you can wipe the phone and restore from a backup.

These apps still have to play by the rules the OS sets, they’d still be scanned and sandboxed and wouldn’t be messing the the fundamentals of how iOS works.

The only way these apps would be the blow-up-the-power-plant button would be if Apple had done a remarkably poor job implementing any sort of security into the OS. I don’t think that’s the case, but maybe I just put more faith in the iOS team than you.
 
  • Like
Reactions: amartinez1660
Uhhhhh. Read what you said. The fact you NEED a firewall to block something is a security issue. Why not just let it call home? And the fact that you can install anything on macOS is all the proof you need that it is more at risk.
No! For example some offline apps still share analytics data with the dev stuff like iOS version, IP address and many other info not necessary to the app functioning. Having a firewall would prevent that.
 
Malware isn’t blowing up the power plant. Uninstall the offending apps or you can wipe the phone and restore from a backup.

These apps still have to play by the rules the OS sets, they’d still be scanned and sandboxed and wouldn’t be messing the the fundamentals of how iOS works.

The only way these apps would be the blow-up-the-power-plant button would be if Apple had done a remarkably poor job implementing any sort of security into the OS. I don’t think that’s the case, but maybe I just put more faith in the iOS team than you.
While security rules keep system running fine, they are not good enough to keep user privacy in default settings.

Chinese Advertising Association tried to introduce an alternative device identifier to bypass Apple’s transparency limit, but failed. Without the App Store being the only distribution platform, they can easily implement anything they want. So would Facebook or any other advertising & analytic companies.
 
While security rules keep system running fine, they are not good enough to keep user privacy in default settings.

Chinese Advertising Association tried to introduce an alternative device identifier to bypass Apple’s transparency limit, but failed. Without the App Store being the only distribution platform, they can easily implement anything they want. So would Facebook or any other advertising & analytic companies.
Then don’t side load. I don’t know how much simpler it gets than “don’t push the button with the warnings all around it”.
 
  • Like
Reactions: d686546s
Then don’t side load. I don’t know how much simpler it gets than “don’t push the button with the warnings all around it”.
The problem is, with Apple hurting advertising companies so badly, there’s a good chance that Facebook or some other big guys just pull their app out of the App Store, or at least limiting functionalities of apps from the Apple App Store, creating fragmentation of the platform. That would not be a benefit for most people.
 
  • Like
Reactions: amartinez1660
The problem is, with Apple hurting advertising companies so badly, there’s a good chance that Facebook or some other big guys just pull their app out of the App Store, or at least limiting functionalities of apps from the Apple App Store, creating fragmentation of the platform. That would not be a benefit for most people.
Unlikely. Epic tried this on Android and had to being Fortnite back to the Play Store because of significant user drop off. They might offer it outside the App Store with extra features (and ad tracking) but I doubt they’d pull it altogether.
 
Undoubtedly, sideloaded apps will have more permissions than apps downloaded from the App Store because they won't need to explain to Apple why they need to request those permissions.

Chinese software companies are releasing apps on Google Play with fewer features than the apps they offer on third-party app stores or their own websites, and Google Play versions of apps will also entice users to sideload their "full-featured" versions.

It's hard to believe that something like this wouldn't happen on Facebook if iOS were completely open to sideloading and even third-party stores.
 
  • Like
Reactions: amartinez1660
Definitely want a safe environment. So sideloading can reduce security. But for Apple, sideloading could lead to loss of revenue too. But then again macOS allows for installation of apps from outside the app store and therefore Apple could definitely offer it on iPhone.
 
Unlikely. Epic tried this on Android and had to being Fortnite back to the Play Store because of significant user drop off. They might offer it outside the App Store with extra features (and ad tracking) but I doubt they’d pull it altogether.
You have a point on Fortnite.

Notice that Fortnite, while popular, still faces proper competition. If Fortnite is nowhere to be found, gamers can and will just play Call of Duty Mobile or any other shooter game instead. Facebook Messenger also faces competition from Signal, Telegram etc.

The real problem comes from apps that have no real alternatives, and are critical for a lot of people. And once there is enough momentum, we would ultimately come to a point when the App Store is not relevant anymore. Bad money drives out good, at least on privacy level.

I know this is a slippery slope argument, but I feel worried.
 

Tim Cook: Users Who Want to Sideload Apps Can Use Android, While the iPhone Experience Maximizes 'Security and Privacy'

...tells the CSAM Hypocrit...​

 
  • Haha
Reactions: januarydrive7
Unlikely. Epic tried this on Android and had to being Fortnite back to the Play Store because of significant user drop off. They might offer it outside the App Store with extra features (and ad tracking) but I doubt they’d pull it altogether.
Don’t be so naive. Instead they will split the app into two. A basic version for the official store and a ‘bells and whistles’ version available from the hypothetical Facebook store. Facebook would have EVERYTHING invested in this - they won’t cut off their users but they’re sure as hell persuade the bulk of them that the Facebook store version is just as privacy protecting as the AppStore version.

It’s a tactic they already use by cutting off messenger from the app and insisting you download the messenger app instead. Sure you can go on the desktop web version and have it all combined but that’s the only way.
 
  • Like
Reactions: amartinez1660
People who want the freedom to install whatever they want on their devices already has an alternative like Android.
If you remove the restrictions on iOS we have no alternative.

You are arguing to take away our choice to get a unique system which is locked down and controlled by its creator.

Well by the standards of the very blunt instrument of "just go elsewhere regardless of other functionality" that's been deployed by some here, you can choose a non-smartphone if security is that paramount to you.

Nokia still makes really nice ones.
 
Why does nobody ever call Apple out on this bogus argument by simply countering that people "side-load" apps on Mac computers every day. Everybody is fine.

"Side-loading" apps has been the norm ever since computers have existed. It was only in 2007 that Apple came up with this ridiculous idea to want to control exactly which apps can and cannot be installed on their operating system.
Nobody?

No one from security camp wants their iPhone to be exactly like a Mac. I don’t.
 

Users Who Want to usb-c Can Use Android.​

Users Who Want always on display Can Use Android​

Users Who Want multitasking Can Use Android​


Unfortunately this is the apple way and they are making it know. Apple decides what the user wants, take it or leave it.
 
  • Like
Reactions: Unregistered 4U
Objectively true. Some people view their phones like toys, some do real serious work on them and can't afford security risks. I don't care about the ability to side load, I care about the device that has so much of my highly sensitive info on it being as secure as possible. Forcing Apple to allow side loading removes that choice from the market.
Can you imagine having a product, that your company sells, and a whole bunch of people are telling you what you allowed and not allowed to put on it?
Am I allowed to tell LG to use android instead Web OS? Can I ask Samsung to not allow sideloading? Can I ask Toyota to install CarPlay access? WTF is going on here
Can you imagine buying a product and a whole bunch of people tell you you're not allowed to opine on it? Like imagine buying a Toyota car and discovering the engine shuts down whenever you leave Toyota-approved roads (for your safety™ of course). So you go online to state your case and suggest there should at least be a way to disable that "feature" for those that truly need it, but then a bunch of upstanding gentlemen succinctly explain to you that only utter morons drive anywhere other than their nearby Walmart and Toyota dealership and only the most depraved reprobates dare criticize Toyota and its glorious leader.
 
The moment the gates open, you will see all the social network apps migrating to another store, demand ridiculous permissions in order to work, and you will have no option but to accept it.
Yep, EXACTLY like on Android where the Playstore is just a barren wasteland with none of your precious social media apps available at all...
 
When you but an Apple device you know what you're getting and you agree to play by the rules. Just because you don't like the manufacturers rules doesn't mean they need to change for you. And YES $$$ is a part of it too - after all Apple is in the business to make money.

I want a Tesla but I also want a gasoline engine, well Tesla doesn't make a car with a gasoline engine, but nothing stops me from buying a Tesla and putting in a gasoline engine. I just don't expect Tesla to support me going forward.
 
  • Like
Reactions: Unregistered 4U
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.