On Fri, Jan 31, 2014 at 1:39 PM, Martin Georgiev <[email protected]> wrote: > > Agree. Yet, it is unlikely that app developers will start caring about > security. All they care about is getting their app published (and > possibly making some $ off it). So, unless the framework developer > makes sure that all usecases are handled properly, there will always > be some users being hosed.
It's software. There are ALWAYS some users being hosed. There's lot of nasty things you can do with the Android and iOS core frameworks as well. You're familiar with the security-functionality-ease of use triangle, right?
