Michael Tsai on Twitter: "@timburks I assume it can prevent network connections entirely. But no way to show the user that, and no way to combine that with IAP."

Country	Code	For customers of
United States	40404	(any)
Canada	21212	(any)
United Kingdom	86444	Vodafone, Orange, 3, O2
Brazil	40404	Nextel, TIM
Haiti	40404	Digicel, Voila
Ireland	51210	Vodafone, O2
India	53000	Bharti Airtel, Videocon, Reliance
Indonesia	89887	AXIS, 3, Telkomsel, Indosat, XL Axiata
Italy	4880804	Wind
3424486444	Vodafone
» See SMS short codes for other countries

Tim Burks ‏@timburks 19 Sep 2014

"Allow Full Access" for keyboard extensions is needlessly scaring people and making developers look shady. http://www.openradar.me/18395289
2 retweets 2 likes
Michael Tsai ‏@mjtsai 19 Sep 2014

@timburks Even aside from the IAP issue, how can the customer know that the containing app won't use the network?
Tim Burks ‏@timburks 19 Sep 2014

@mjtsai With "Allow Full Access" there's no way to know. We need an intermediate mode.
Tim Burks ‏@timburks 19 Sep 2014

@mjtsai But if the containing app can't get anything from the keyboard, that would prevent key logging.
Michael Tsai ‏@mjtsai 19 Sep 2014

@timburks Right, but there are good reasons to let the app access the data. We just need a way to prevent the app from sending it anywhere.
Tim Burks ‏@timburks 19 Sep 2014

@mjtsai I think that's going to require better sandboxing in the OS. I don't know but expect there are lots of ways to open a socket.

‏@mjtsai

@timburks I assume it can prevent network connections entirely. But no way to show the user that, and no way to combine that with IAP.

10:48 AM - 19 Sep 2014

Michael TsaiVerified account