Hacker News Reader

Comment by vincnetas | Hacker News Reader

App distribution can be totally different from API access to my device. No matter where i get the app from, when accessing certain APIs i would get notified about that, or would have to explicitly enable that functionality in OS settings.

View on HN

For Apple to know about API access the app would still have to submitted to them in some manner.

The idea was that the phone OS could detect the usage of those APIs and prompt the user wthout Apple having to be directly involved in the process.

"that the phone OS could detect the usage of those APIs"

This must be handled correctly as it can this also lead to privacy violation.

Just like on device image recognition which Apple is already doing.

There is no reason it can't all be done on-device. That is indeed how the current "Enable camera access?" etc. system works.

This is not a question at all that this can be done or not ( There is no reason it can't all be done on-device. )

Question is will this be ethical .. I will not be comfortable using a device that logs every API an app on it is calling.

Access control is not the same as logging - the first time an application tries to access the API the OS checks permissions, asks user to approve/deny, and then stores the user's choice. No need to log the actual API calls at all, no permanent records needs to be created.

Why would anything have to be logged? Apple phones already do this and have done for years. With no phoning home.

Reply on news.ycombinator.com