Experts Not Surprised By iPhone Malicious App Report

04.12.2009

Both Dai Zovi and Miller noted that Seriot's report brings up an Apple philosophy that differs from open platforms like Android.

Apple has a one-size-fits-all approach to data access, so if I download a game, it can still technically access my contacts and keypad entry. On Android, users are told what data is accessed when they install an application, but the review process isn't as strict. Seriot's research essentially lists all the things a malicious app could use under Apple's approach, and notes that only Apple's censors are standing in the way.

"Largely, it's up to users to decide what experience they want," Dai Zovi said. "Do they want the greater freedom with the greater risk of this type of spyware, or do they want the assurances--albeit imperfect assurances--provided by Apple looking over these applications?"