Apple thwarts bait-and-switch iPhone apps
By Stewart Mitchell
Posted on 10 Jan 2013 at 11:48
Apple has moved to block a bait-and-switch loophole in its App Store, but has drawn criticism for taking so long to fix the issue.
Bait-and-switch tactics involve portraying goods for sale as an enticing proposition before swapping them for something less appealing, such as a substandard app instead of a popular game.
The company has quietly updated its developer guidelines, with Apple now insisting that app screenshots are locked once an app appears in its store, meaning scammers can no longer switch the images used for promotional screenshots.
FeatureThe 22 best iPhone apps
"Beginning 9 January, app screenshots will be locked in iTunes Connect once your app has been approved," the company said in its announcement. "New screenshots may be uploaded when you submit a binary for an update to an existing app or a new app."
The changes mean it will be harder for con artists to fool downloaders into paying for a useless app, security experts claim.
One wonders why Apple, a company that is so punctilious about the actual software it lets into the App Store, hasn't enforced a corresponding precision in App Store advertising
“Produce a legitimate, uncontroversial but not terribly interesting app - something you can do quickly and inexpensively - and get Apple to approve it for sale in the App Store at a modest cost," said security company Sophos in a blog post explaining how the scam worked.
"Then do a bait-and-switch not of the app itself, but of your promotional material, dropping in a screenshot from a well-known or highly professional app to make your software look like great value for money."
Although the app will eventually be kicked off the store, the perpetrators could already have netted a decent lump sum for little effort, the security company claims.
While Sophos praised the changes, it also questioned why it had taken Apple so long to address the issue, with several related scams already well documented.
"One wonders why Apple, a company that is so punctilious about the actual software it lets into the App Store, hasn't enforced a corresponding precision in App Store advertising all along," the company said.
- Google Glass: mugger bait, pub problem and other lessons learned from two dangerous weeks
- Twitter, please don't fiddle with my feed
- How Satya Nadella can get some pay-raise karma
- Windows 10: a step back to go forward
- Michael Dell: Cloud infrastructure is the roads, bridges and highways of the 21st century
- How to check your identity hasn’t been sold to the hackers
- Tim Cook: this is how much TV has changed since the 70s
- Westminster wins the .London battle
- 20 years of PC Pro: from deep pan pizza to virtualisation
- Five reasons why the Apple Watch leaves me cold
- How to sell more ebooks on Amazon
- 10 ways to make your business more secure
- Top five VoIP mistakes
- How to add in-app purchasing to an iPhone, Android or Windows app
- Remote-control ransomware: TeamViewer and software hardball
- Why laptops with serial ports matter to the Internet of Things
- Make your mobile battery last longer
- Small steps into handling Big Data
- Nexus 5: does it really run stock Android?
- How to get broadband to a garden office