{"id":42537,"date":"2024-03-17T14:28:09","date_gmt":"2024-03-17T18:28:09","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=42537"},"modified":"2024-05-23T12:14:56","modified_gmt":"2024-05-23T16:14:56","slug":"ios-notarizations-human-review","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2024\/03\/17\/ios-notarizations-human-review\/","title":{"rendered":"iOS Notarization&rsquo;s Human Review"},"content":{"rendered":"<p><a href=\"https:\/\/developer.apple.com\/support\/dma-and-apps-in-the-eu\/\">Apple<\/a>:<\/p>\n<blockquote cite=\"https:\/\/developer.apple.com\/support\/dma-and-apps-in-the-eu\/\">\n<p>Notarization for iOS apps is a baseline review that applies to all apps, regardless of their distribution channel, focused on platform policies for security and privacy and to maintain device integrity. Through a combination of automated checks and human review, Notarization will help ensure apps are free of known malware, viruses, or other security threats, function as promised, and don&rsquo;t expose users to egregious fraud.<\/p>\n<\/blockquote>\n\n<p>This is not a quick automated check like with Mac app notarization. There is a human review step where Apple checks the app against a subset of the <a href=\"https:\/\/developer.apple.com\/app-store\/review\/guidelines\/\">App Review Guidelines<\/a>. There is now a &ldquo;Show Notarization Review Guidelines Only&rdquo; checkbox that highlights the relevant guidelines. The list is actually much more extensive than I initially thought. Health-related content is highly regulated. Multitasking and location services are restricted. You can&rsquo;t use the hardware volume buttons. You can&rsquo;t scrape data from Apple Web sites. Third-party login services are restricted. You can&rsquo;t monetize built-in capabilities. You have to treat Apple with respect (Developer Code of Conduct). And, unfortunately, this adds delays and the possibility for human error and corporate stonewalling.<\/p>\n\n<p><a href=\"https:\/\/mastodon.social\/@rileytestut\/112102194734084016\">Riley Testut<\/a>:<\/p>\n<blockquote cite=\"https:\/\/mastodon.social\/@rileytestut\/112102194734084016\">\n<p>lol my clipboard manager Clip was rejected from Notarization because it &ldquo;requires push notifications in order to function&rdquo;<\/p>\n<p>(it doesn&rsquo;t, they&rsquo;re optional)<\/p>\n<\/blockquote>\n\n<p>This is not just a mistake. It&rsquo;s a charade because it&rsquo;s not possible for App Review to accurately detect this, anyway.<\/p>\n\n<p><a href=\"https:\/\/mastodon.social\/@iKyle\/112102333790089352\">Kyle Howells<\/a>:<\/p>\n<blockquote cite=\"https:\/\/mastodon.social\/@iKyle\/112102333790089352\"><p>Apple&rsquo;s amazing innovation of bringing the fun, accuracy and unpredictability of App Review to Side Loading.<\/p><p>This is just what the web, the Mac, Windows, and Android have been missing all these years!<\/p><p>Random rejections for things your app doesn&rsquo;t even do!<\/p><\/blockquote>\n\n<p>Previously:<\/p>\n<ul>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2024\/03\/15\/spotify-anti-steering-stonewalling\/\">Spotify Anti-Steering Stonewalling<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2024\/03\/13\/web-distribution-of-ios-apps-in-eu\/\">DMA Compliance: Web Distribution of iOS Apps in EU<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2024\/03\/06\/apple-terminates-epic-games-developer-account-again\/\">Apple Terminates Epic Games&rsquo; Developer Account Again<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2024\/01\/25\/dma-compliance-alternative-app-stores-but-no-sideloading\/\">DMA Compliance: Alternative App Stores But No Sideloading<\/a><\/li>\n<\/ul>\n\n<p id=\"ios-notarizations-human-review-update-2024-03-20\">Update (2024-03-20): <a href=\"https:\/\/mastodon.social\/@nicklockwood\/112118744527168706\">Nick Lockwood<\/a>:<\/p>\n<blockquote cite=\"https:\/\/mastodon.social\/@nicklockwood\/112118744527168706\"><p>Sure would be a shame if folks were to spam App Store Connect with thousands of innocuous-seeming apps that after passing Apple&rsquo;s approval process immediately switched to showing an unskippable full-screen message to the effect of<\/p><p>&ldquo;App review doesn&rsquo;t and cannot prevent malicious apps doing whatever they want. It&rsquo;s security theatre whose real purpose is to let Apple impose artificial limitations on what iOS users can do with their own devices, and stifle innovation they don&rsquo;t approve of&rdquo;<\/p><\/blockquote>\n\n<p><a href=\"https:\/\/mastodon.social\/@ahnafm@techhub.social\/112117587430420832\">Ahnaf Mahmud<\/a>:<\/p>\n<blockquote cite=\"https:\/\/mastodon.social\/@ahnafm@techhub.social\/112117587430420832\">\n<p>I have found 2 scam apps on the store today from the same developer, the moment you launch the apps you get redirected to a bitcoin site prompting you to install a config profile. How did these get through App Store review?<\/p>\n<\/blockquote>\n\n<p id=\"ios-notarizations-human-review-update-2024-03-25\">Update (2024-03-25): Riley Testut&rsquo;s app is now in its <a href=\"https:\/\/mastodon.social\/@stroughtonsmith\/112157147758404271\">4th week<\/a> of waiting for notarization review.<\/p>\n\n<p id=\"ios-notarizations-human-review-update-2024-05-23\">Update (2024-05-23): <a href=\"https:\/\/fosstodon.org\/@altstore\/112486085494364227\">AltStore<\/a>:<\/p>\n<blockquote cite=\"https:\/\/fosstodon.org\/@altstore\/112486085494364227\"><p>We currently have several apps in Apple&rsquo;s notarization process with more on the way &#x1F642;<\/p><p>Unfortunately, they&rsquo;ve been stuck in review for multiple weeks.<\/p><\/blockquote>\n\n<p><a href=\"https:\/\/mastodon.social\/@rileytestut\/112486133399914853\">Riley Testut<\/a>:<\/p>\n<blockquote cite=\"https:\/\/mastodon.social\/@rileytestut\/112486133399914853\">\n<p>Apple&rsquo;s told us many times their goal is for Notarization to take &ldquo;a few hours&rdquo; max, but so far every AltStore app submission (from both us and 3rd party devs) has taken multiple weeks &#x1F643;<\/p>\n<\/blockquote>","protected":false},"excerpt":{"rendered":"<p>Apple: Notarization for iOS apps is a baseline review that applies to all apps, regardless of their distribution channel, focused on platform policies for security and privacy and to maintain device integrity. Through a combination of automated checks and human review, Notarization will help ensure apps are free of known malware, viruses, or other security [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"apple_news_api_created_at":"2024-03-17T18:28:16Z","apple_news_api_id":"1d501a9e-2021-4527-88f0-649df30e4e7c","apple_news_api_modified_at":"2024-05-23T16:15:00Z","apple_news_api_revision":"AAAAAAAAAAAAAAAAAAAABQ==","apple_news_api_share_url":"https:\/\/apple.news\/AHVAaniAhRSeI8GSd8w5OfA","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_is_hidden":false,"apple_news_is_paid":false,"apple_news_is_preview":false,"apple_news_is_sponsored":false,"apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":"\"\"","apple_news_suppress_video_url":false,"apple_news_use_image_component":false,"footnotes":""},"categories":[2],"tags":[1878,2542,2036,2571,2570,31,2321,772,1842,1074],"class_list":["post-42537","post","type-post","status-publish","format-standard","hentry","category-technology","tag-altstore","tag-app-marketplaces","tag-app-store-scams","tag-delta-emulator","tag-digital-markets-act-dma","tag-ios","tag-ios-17","tag-ios-multitasking","tag-notarization","tag-push-notifications"],"apple_news_notices":[],"_links":{"self":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/42537","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/comments?post=42537"}],"version-history":[{"count":7,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/42537\/revisions"}],"predecessor-version":[{"id":43385,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/42537\/revisions\/43385"}],"wp:attachment":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/media?parent=42537"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/categories?post=42537"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/tags?post=42537"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}