动态调用私有API而不被App Store注意到
最近我听到不少谣言（或者真实的故事？），关于一些中国 iOS 开发者如何成功欺骗 App Store 私有 API 检查系统，并让他们的动态调用私有 api 应用程序获得批准并在应用商店上架。
到目前为止，这些故事都集中在 WebKit 私有 API 上。他们表示，他们通过调用这些私有 WebKit API 成功获取了 iPhone 用户的个人数据。
我不得不说我很困惑。我的问题是：
- 他们的说法符合逻辑吗？ （即是否可以通过 WebKit 私有 API 访问用户的数据？）
我对实现该任务的可能方法的思考。
- 通过performSelector:方法
- 通过NSInitation
- 通过这种所谓万能而神秘的反射的东西
我自己觉得不太可能。但我的iOS经验有限，所以我对自己的判断不太有信心。任何建议都非常受欢迎。 :)
Recently I heard quite a few rumors (or true stories?) on how some Chinese iOS developers succeeded in fooling the App Store private API checking system and have their dynamically-calling-private-api apps approved and available in the app store.
So far those stories focused on WebKit private APIs. They stated that they succeeded in getting access to the iPhone user's personal data by calling those private WebKit APIs.
I have to say I'm confused. My question:
- Is their statement logical? (i.e. Is it possible to getting access to the user's data through WebKit private API?)
My thinking on possible ways to achieve the task.
- through the performSelector: method
- through NSInvocation
- through this so-called almighty and mysterious reflection thing
I don't think it's possible myself. But my iOS experience is limited so I'm not that confident in my judgement. Any suggestions are highly welcome. :)
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
回答你的问题，是的，他们的说法是合乎逻辑的。您可能能够通过许多私有 API 访问用户的个人数据。你没有提到什么个人信息，所以不可能明确地说。
我对你关于如何做到这一点的想法的评论：不要，不值得冒你作为开发人员的声誉的风险，或者如果这是一项雇佣工作，那么不值得冒客户声誉的风险，或者如果你是试图规避/违反您与 Apple 同意的服务条款。
To answer your question, yes their statement is logical. You would likely be able to access user's personal data through a number of private APIs. You don't mention what personal information, so it's not possible to say definitively.
My comment on your thinking about ways to do this: don't, it's not worth the risk to your reputation as a developer, or the client's reputation if this is a work for hire, or the status of your developer account if you're trying to circumvent/violate the terms of service you agreed to with Apple.