Tor Project: Fake Tor App Has Been In Apple's App Store For Months

itwbennett (1594911) writes "For the past several months Tor developers have unsuccessfully been trying to convince Apple to remove from its iOS App Store what they believe to be a fake and potentially malicious Tor Browser application. According to subsequent messages on the bug tracker, a complaint was filed with Apple on Dec. 26 with Apple reportedly responding on Jan. 3 saying it would give a chance to the app's developer to defend it. More than two months later, the Tor Browser app created by a developer named Ronen is available still in the App Store. The issue came into the public spotlight Wednesday when people involved in the Tor Project took to Twitter to make their concerns heard. Apple did not respond to IDG News Service's request for comment."

Comments

strange priorities ... unless they already knew

[Anonymous Coward]

Apple can burn a book in seconds for showing a little bit of flesh, yet an application may be getting their users tortured in dictatorships and it takes them months to fix.

I think we know who's been working for the NSA and then denying involvement; don't we.

Re:strange priorities ... unless they already knew

[ArcadeMan]

Typical American knee-jerk reaction. Showing a nude body is wrong but showing someone getting shot in the head is normal.

Re:strange priorities ... unless they already knew

[lgw]

Clearly the TOR team is going about this wrong! Stop telling Apple "this app causes your customers to be tortured to death" - Apple cares not. Instead tell Apple "please pull this app, my kid used it to watch porn". Gone in 60 seconds.

Re:"unofficial" would be a better path to takedown

[AmiMoJo]

"Tor Browser Bundle" is the name of the official secure browser/Tor app distribution. This app was using the name but was not associated with the creators of the real Tor Browser Bundle at all, and apparently contained advertising and spyware which as well as putting users at risk was damaging the reputation of the official bundle. Since it wasn't open source or audited there is no way to really know how well it worked, but the fact that it had advertising suggests that it was not particularly well designed since adverts themselves leak information about the user.

Apple apparently doesn't treat copyright claims from non-commercial entities very seriously, as evidenced by the bug report. It took people using their personal contacts to get things moving in the end. If the people at Apple who review apps before releasing them to the app store were half way competent they would never have allowed it in the first place. They clearly didn't understand that the claims it was making could't really be true (due to the advertising at the very least) and a quick google would have revealed that the name was ripped off.