Tim Burks
Michael Tsai
@timburks Even aside from the IAP issue, how can the customer know that the containing app won't use the network?
"Allow Full Access" for keyboard extensions is needlessly scaring people and making developers look shady. http://www.openradar.me/18395289
-
-
-
@mjtsai With "Allow Full Access" there's no way to know. We need an intermediate mode. - View other replies
-
@mjtsai But if the containing app can't get anything from the keyboard, that would prevent key logging. -
@timburks Right, but there are good reasons to let the app access the data. We just need a way to prevent the app from sending it anywhere. -
@mjtsai I think that's going to require better sandboxing in the OS. I don't know but expect there are lots of ways to open a socket. -
@timburks I assume it can prevent network connections entirely. But no way to show the user that, and no way to combine that with IAP.
-
-
-
@timburks It is kind of scary though, no? -
@jerryhjones Yeah very, that's the point. We shouldn't have to ask for it to deliver IAP in extensions. -
@timburks Ah, I see. You’d like to NOT ask for it when you don’t need it? -
@jerryhjones right - sorry that wasn’t more clear
-
-
@timburks “not ALL keyboard extensions…” …I’ll let myself out now
Jerry Jones
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.