« Upcoming gadgets worth saving your money for | Main | Stickybits: Giving your objects a life online »

03/12/2010

The canker at the heart of Apple's App Store

SAN FRANCISCO - JANUARY 27: Apple Inc. CEO St...Image by Getty Images via Daylife

It seems that Apple continues to get into hot water over its applications store for the iPhone. The Electronic Frontier Foundation finally managed to get a copy of the developer agreement, which developers have to sign before they can submit applications for approval.

The EFF, which got the agreement after issuing a Freedom of Information Act request in the US, says that are some things in the agreement that give it a cause for concern.Apple can reject an application for any reason, even if it meets all the formal requirements. Moreover, Apple can get rid of an application that it has already approved, at any time. The company is also able to remotely disable applications even after users have installed them (and, presumably in some cases, paid for them - yikes!).

Apple invoked the ire of its developer community recently, after arbitrarily deciding to kill all adult applications for the iPhone. And the company has a habit of refusing to authorise some applications for no discernible reason. That is what it did with Google Voice last year, when the search engine giant tried to release an application in the App Store.

There's no doubt that Apple, for all of its wonderful hardware design and fabulous software, is something of a fascistic company. At the other end of the spectrum, we have Google's Android App Store. Users are allowed to install anything they want on the open source Android system.

The question is, which would you rather have? The problem with allowing users to install any application they want is that sometimes, those applications are not good for them. At the RSA security conference earlier this month, researchers from security firm TippingPoint revealed that they had released an application designed for Android devices, and for jail broken iPhones. A jail broken iPhone is one in which the user has removed the software protection originally imposed by Apple, enabling them to load and run anything they like. 

The application was a simple weather app, like the ones that have already been authorised by Apple. Except that this one wasn't authorised. It turns out that the researchers embedded code in the application that enabled them to harvest information from the iPhones, essentially turning them into a huge botnet. 8000 fans were co-opted to the botnet in the experiment. They didn't distribute their app through the conventional Apple iPhone or Android stores, instead offering it through third party sites offering collections of apps.

Ideally, a locked down, draconian App Store would stop software applications that did naughty things from being downloaded. But what isn't clear is how much effort Apple actually puts into verifying that its software isn't malicious. In November last year, iPhone games developer Storm8 was hit by a lawsuit after it was alleged that the company's software was collecting the phone numbers of iPhone gamers without their knowledge or consent. The developer blamed it on a software bug.

But, whether it was a bug, or intentional, it raises interesting questions about Apple's level of diligence when it comes to approving applications. What would you rather have? A mobile phone application service that lets you install anything you like at your own risk, or a locked-down store that only lets you install the applications that Apple approves, some of which may be gathering data on you secretly, regardless?

Danny Bradbury, MSN Tech & Gadgets

Reblog this post [with Zemanta]

TrackBack

Comments

Feed You can follow this conversation by subscribing to the comment feed for this post.

Post a comment

advertisement

Danny BradburyDanny Bradbury

Danny Bradbury is a technology journalist with 20 years' experience. He writes regularly for publications including the Guardian, the Financial Times, the Financial Post, and Backbone magazine. Danny also writes and directs documentaries.

Maurice CachoMaurice Cacho

Maurice Cacho is a Toronto-based journalist mixing his love for tech with a passion for news. He's also CP24's Web Journalist and appears daily on CP24 Breakfast and weekly on the channel's tech show, Webnation, discussing tech news and trends.

FACEBOOK