Hacker News new | comments | show | ask | jobs | submit login
Dash developer's response to Apple's response (kapeli.com)
190 points by guelo 7 days ago | hide | past | web | 129 comments | favorite





Apple should change their process so that they contact all linked accounts if it's possible that they would be closed.

End of.

Kind of.

Seems like Apple is working off the assumption that linked accounts are acutely aware of what each other are doing, and thus are all equally responsible for each others actions. Clearly this assumption is not valid.

Having listened to the entire call, I think both parties conducted themselves with respect and good faith. The only question unanswered in the call is “why didn't Apple notify both accounts?”.

Apple is in a position of disproportionate power here. They created the platform, they make the rules, everybody either plays by them or doesn't play at all. I really hope Apple will just be honest and admit that they did, in fact, have an inadequate process for dealing with this kind of corner case. They did make a mistake. They closed someone's account when it shouldn't have been closed.

If Apple is adamant that they made no mistake, they only reinforce the feeling that Apple has become an inhuman giant, a profit-hunting corporate entity, that doesn't really care about human values — the antithesis of what Apple used to be.


Where did you hear the entire call? I only heard the part on his blog that clearly didn't start at the beginning.

Apple didn't notify both accounts because they're under no obligation to notify someone that they're committing fraud and ask them politely to stop.

Why would you take the word of a developer dumb enough to post this audio clip and publicly shame Apple in blog posts as someone honest and working in good faith with them? Here's a much more likely story: he's not telling the truth and he's in over his head. His cousin didn't leave fraudulent reviews from his test devices on his and competitors' apps for no apparent reason.


Ah, I should've said "entire recording". What's posted on the blog is all I've heard.

Apple is under no obligation to do anything, they can do as they please. But just because an entity is “under no obligation” to do something, or something is “completely legal”, doesn't make it right.

In this case, I'm siding with the developer for a few reasons.

First of all, his app is good, the reviews are genuine, and even Apple thinks so.

Second, I can relate to him, as I've given away test hardware to others, and I was not aware that I should vouch for whatever they do with the hardware.

Finally, Apple is the big player here with all the muscle. When in doubt, I try to side with the party that didn't come up with the rules.


Wether apple is inhuman or the developer is a prick is quite an open question.

Both were faulty and they obviously didn't come to an agreement. Apple phone offer would have gave both of them a clean exit and it might always remain shady why this agrement wasn't actually implemented...

After carefully listening to the phone call I still don't understand why the developers was arguing at all. He could have been back in buisness in a breeze with no harm at all.


> Both were faulty and they obviously didn't come to an agreement.

I don't know how you arrived at that conclusion. The developer offered to publish a blog post saying that the app was removed due to fraudulent activity on a linked account he was not aware of. Apple accepted and then went ahead and published a statement accusing him of engaging in fraudulent behaviour anyway, claiming they gave plenty of warning, but not mentioning that the activity was limited to the non-Dash account, that the developer claims to have been unaware of the connection, and that they did not inform him of the connection or give any warning on this account. That's just dishonest.


Well it's more like Apple asked him to post an explanation on his blog. As far as I know this asked blog post was never published and then Apple realease it's response.

So again this might well remain unsolved because probably no one appart from the arguing parties can't tell why the agreement on the blog post in exchange for dev program re-enrollment wasn't fulfilled by either parties...


> As far as I know this asked blog post was never published and then Apple realease it's response.

From the blog post:

> Update: Just to make it clear, I have complied with Apple’s request and have sent a blog post draft approximately 30 minutes after this phone call ended. I have since not received any contact from Apple in any way, and they did not respond to my calls. Their recent statements come as a shock as I thought we were working together to resolve this issue.

Given that Apple's statement left out several important facts (arguably, to paint a rosy picture of their behavior), I'm inclined to believe the developer here.


So maybe we can agree it relate to faith, not facts.

I choose to focus more on the actual phone recording than to the dev post because at least you can hear both positions.

Indeed something had gone wrong in the process they agreed on phone. But it's words against words. So I really think it's better not to chose to believe in one over another, because that would always be tainted by our own personal predisposition (which of course may differ).


What mistake did Apple make?!

Is everyone here taking the developer's word at face value? Despite him giving no reason to do so?


Both Apple and the developer made mistakes. That much is clear.

Apple, being a big corporation, is inhuman if they do not admit their mistakes.

The developer, being a human, is a prick if he doesn't admit his mistakes.


If Apple is open to admit the dev back to the program means he didn't really commit fraud.

And if he didn't commit fraud, why is Apple enforcing him to write a PR blog post in favor of Apple as a condition to get back into the program?

Apple wants him to write fake review. Oh the irony.


The phone call doesn't stipulate terms the way you describe.

Apple says his account was linked to the fraudulent account. They define "linked" as sharing test devices, and having been enrolled under the same credit card number. The accounts were linked.

They say to the developer that if he explains exactly the above then his account will be re-instated. It's not a "fake review" if it's stating the facts.

The part where we can assign blame to Apple is where they failed to notify all "linked accounts" when one of the accounts was engaged in fraudulent activity. They only notified the account engaged in the fraudulent activity, but went on to shut down that account and all linked accounts.

If they had notified all linked accounts then the developer claims he could have taken steps to resolve this much sooner. (But to argue for Apple's side here: Apple views all linked accounts as a singular "legal entity," and so assumed notifying one was the same as notifying them all.)


The gist of this point is the debate around banning guns from people on the terrorist watch list. One side insists that if they are bad enough to watch, we shouldn't let them buy guns (this is Apples stance that since our arbitrary system linked them, that suddenly makes him guilty.) and the people on the other side, insist that since there is no due process to being added to the terrorist watch list, it is a way to bypass a constitutional right (which is a valid point, whats to stop the government from arbitrarily adding people to these lists and stopping them from buying guns.

Regardless of which side of the argument you lean towards, they can both legitimately believe they are 100% in the right.


Both sides agree with the facts of the case:

- Developer used his credit card to enrol in multiple accounts

- Developer had same test devices on both accounts

- One account engaged in fraud

- One account was notified of fraud

Apple's request is that the developer make these facts known and have his account reinstated. Because Apple doesn't want to be seen as arbitrarily shutting down developer accounts — they have reason in this case and want it known.

It seems like Apple was sympathetic to the claim that the developer lost control of / forgot about the account which had the fraudulent activity. But also wanted to be seen as having a reason for pulling Dash in the first place.

They weren't asking the dev to admit to fraud. They were asking him to admit to opening multiple developer accounts and losing control of one. Which both sides acknowledge he did. I'm not sure I understand why the developer thinks this would be an admission of wrongdoing on his part (unless the wrongdoing was opening multiple accounts and giving them to untrustworthy people, which he did).


> They weren't asking the dev to admit to fraud. They were asking him to admit to opening multiple developer accounts and losing control of one. Which both sides acknowledge he did. I'm not sure I understand why the developer thinks this would be an admission of wrongdoing on his part

Just to be clear, the developer would've been happy to do exactly that:

> On Saturday they told me that they are fine with me writing the truth about what happened, and that if I did that, my account would be restored. Saturday night I sent a blog post draft to Apple and have since waited for their approval.

However ...

> Tonight Apple decided to accuse me of manipulating the App Store in public via a spokesperson.

Apple's press release does not make any mention of the fact that the fraudulent reviews were for apps from a different (linked) developer account. They also say that they gave multiple warnings prior to removing the app. The developer's blog post and his recording shows this only to be true for the linked account, not his. At the very least, Apple is guilty of lying by omission.

All in all, I think this is very bad form from Apple. They could've simply admitted that their notification system does not present a full picture to developers and fix that, rather than do some weird "we want to make clear we did nothing wrong" dance, and then go out and make misleading statements.


It's also very possible that the developer is not telling the whole story. It's not like Apple does this kind of thing every day and their statement is fairly clear.

They also likely have additional information, like the IP addresses and timestamps in use when the reports were made. Keep in mind that Apple doesn't make money (directly) from taking the guy's app down, and even the guy's story doesn't really make sense.

It hinges on the idea that he bought the developer program for a relative, who then used a bunch of his devices years later to leave a bunch of fraudulent positive reviews for his apps and negative ones for competitors. Really?

It sounds to me like Apple had him dead to rights and gave him an out, despite having no need to do so. He knows he screwed up AND publicized this with his blog, so he can fix it with his blog or he can lie in the bed he made. He stuck with his made-up story to save face (at the expense of Apple) so they're sticking with the original decision.


Two important points.

>It's not like Apple does this kind of thing every day

1. Just because you don't hear about it doesn't mean it doesn't happen all the time to less known developers with no public voice.

2. What's his incentive not to take the out Apple offered him? If he was guilty & had no problem lying, why the heck wouldn't he grab the opportunity to be reinstated?

The only rational incentive to hold his ground is if he actually believes he is in the right. Which indicates that his story is likely true.

I agree that he could just as easily be lying, but the series of events and decisions fit much better with a guy who feels hurt and in the right, versus a guy who has no problem lying and being dishonest publicly.

Edit: spelling correction


What's the issue here? Seriously.....

So this guy has a lot of suspicious activity on accounts linked to him. Apple have done what they believe is the right thing to protect the integrity of the app store, in line with there own terms and conditions which the developer has agreed too.

Said developer has published blog posts online that give Apple very bad publicity over this, making them look like the bad guy for trying to protect users and maintain quality (What does apple have to gain by randomly disabling this guys account?)

Apple have reached out to him and offered to sort the issue out as long as he posts the facts in a blog post, which is fair after his previous posts have outright caused Apple PR issues for something that is his own fault.

Apple have also got top execs dealing with this issue, trying to make things right. Developer doesn't release said blog post, so Apple releases statement with said facts to protect themselves for further incorrect accusations.

Developer then gets but hurt and releases the conversation that does nothing to help there situation.

What is the developer trying to achieve here exactly? Sounds like the developer is guilty as sin for this fraud and is more interested in accusing apple and covering themselves.


> which is fair after his previous posts have outright caused Apple PR issues for something that is his own fault

1. That it's his fault isn't so clear. The developer claims he was not notified that there was a linked account until two days after a ban. If you listen to the recording, he asks why he was not notified, and the representative does not give a good answer.

> Developer doesn't release said blog post, so Apple releases statement with said facts to protect themselves for further incorrect accusations.

2. If we are to believe the developer, then he actually sent a draft of the blog post to Apple, then Apple doesn't respond and instead posts a public statement.

> What is the developer trying to achieve here exactly?

3. Telling his side of the story and what happened. If we just heard the Apple side of the story and that was it, then we would assume, as many did, that the developer did do review manipulation. If we didn't hear about his side, we would have had no idea that Apple discovered the fraud on a linked account and wanted a blog post explanation to reinstate the account. Apple's statement was incomplete given everything they knew; there was no talk of "linked" accounts or anything of that sort.

> Sounds like the developer is guilty as sin for this fraud

4. Again, if we are to believe the developer, there was no intent to defraud anyone, so I think it's a stretch to say that he's "guilty as sin" for it. The only fraud would be his cousin's fraud that his account is connected to, which Apple failed to notify the developer about until two days after closing his account and after the blog post.


After listening to the first 2 minutes of the call, i can say with absolute confidence that Apple is straight-up blackmailing him.* I would love to hear opinions on whether this is something that could be taken to court.

* They did make a mistake in not verifying whether the second account activity was actually done by Kapeli, yet they want him to claim they made no mistake, otherwise they won't reinstate Dash.


I think Apple's position is reasonable here.

A second developer account, which is the account linked to fraudulent reviews, was opened using the same credit card, same bank account, and same test devices as the main Kapeli account. So it's reasonable that they would assume the same person was in control of both accounts.

The developer claims this is not the case, however. Apple seems willing to accept that. All they are asking is for him to write a blog post stating these facts.


Apple is reasonable but they should probably change their policy to notify all "linked" accounts when one of these accounts might end up being responsible for closing them all.

Not at all.

If Apple is ready to bring him back it's because he didn't commit fraud.

And if he didn't commit fraud he shouldn't need to write a blog post as a condition to get back. Quite contrary, Apple owes him an apology.


The blog post request is to make it clear that his account was linked to an account engaged in fraudulent activity. Apple wanted him to post it because it would make clear that he opened both developer accounts with his credit card, even if he eventually lost control of one.

If you open developer accounts that eventually engage in fraudulent activity you're not "owed" an apology. You should be on top of the things you open in your name and with your bank details.

Apple should have taken steps to notify all linked accounts. That's their mistake. But it was the developer's mistake to open an account for someone who would engage in fraud in the first place.


The unreasonable parts are:

- Apple assumed, and let these assumptions stay untested, and particularly failed to reach out to the different contact details on all involved accounts.

- Apple admits they terminated his account in error, yet blackmail him in refusing to reinstate unless he makes a blog post. (Actual contents of the post irrelevant to the point at hand.)


Where did they say they terminated his account in error? On the recorded call they made it very clear that the accounts were linked and that Apple believes that to be accurate. The fact that they're willing to provide Kapeli with a way to get his account unlinked and reinstated does not mean they were incorrect in the first place.

Apple representative states there was no wrongdoing on Kapeli's side. Absent any wrongdoing on his side the termination is in error. Additionally they made the error of not contacting the holders of all accounts involved.

The Apple representative told him he doesn't need to admit to any wrongdoing which is different from saying they believe there was no wrongdoing on Kapeli's part.

It does not matter what they think or believe. They admit to certain facts being reality and that's all that matters.

It matters what they think or believe because you said

>Apple representative states there was no wrongdoing on Kapeli's side.

which is a misrepresentation of what the Apple rep said on the call.


Alright, i worded that badly. They admit to there being no wrongdoing on Kapeli's side by giving the option to reopen his account at all.

If they thought there were any wrongdoing they wouldn't even be talking to him, much less make him that offer.


Why are you equating Apple's willingness reinstate his account with an admission that there was no wrongdoing?

The wrongdoing here is that he opened multiple accounts that could legally be linked to him and allowed one of them to be used to defraud the App Store. Apple could see that as wrongdoing while being sympathetic to his story that he forgot about it / lost control of it and so allow him to reinstate his account.


> he opened multiple accounts

You got your facts wrong. He did not do that.


At the very least he allowed his credit card to be used in the enrolling of multiple accounts. We don't actually know whether he went through the sign up procedure for both accounts — he very well may have, you don't know either.

But in either case, Apple may have viewed this as the wrongdoing.

So the same question applies to you: why are you equating Apple's willingness to reinstate his account with an admission that there was no wrongdoing?


> Apple may have viewed this as the wrongdoing.

It is expressly permitted by their guide lines to use another person's credit card to start one's own account as long as one provides govt id: https://developer.apple.com/support/purchase-activation/ Please get your facts straight before trying to get into an argument.

As to your question: If there was any wrongdoing, which Apple at first staunchly insisted there was, Apple would not even bother to talk to him, much less offer any redress.


I'm not arguing that the guidelines don't permit one to use another person's credit card.

I'm suggesting that if the account goes on to commit fraud then Apple may view that as wrongdoing. That is, the developer loaning out their credit card should be more responsible. Can you not see that this is a possibility?

And if this is a possibility then you might also see how Apple could allow the developer to reinstate their account because they are sympathetic to the reasons behind it happening. It doesn't have to mean that no wrongdoing took place.

It simply means: "We understand there was no intent to commit fraud, but it still happened, so we'll let you have your account back as long as you clear up how and why this happened on your blog."

Edit: Why would Apple not talk to him if there was any wrongdoing? I have been in a position where Apple has talked to me after assuming I was involved in wrongdoing. I was able to clear it up because they talked to me about it.


> That is, the developer loaning out their credit card should be more responsible. Can you not see that this is a possibility?

No, that is absolutely dificulous to me, and if it were the case, then the guidelines must state that, which they don't.

> Why would Apple not talk to him

Because they already told him they would not when they thought there was nothing in question.


> the guidelines must state that, which they don't.

Why must they state that? It's a fairly obscure edge case that they probably didn't predict. There aren't going to be guidelines for every conceivable possibility of how a cluster of Apple developer accounts can be (mis)used.

> Because they already told him they would not when they thought there was nothing in question.

Your claim is that if Apple even talks to the developer, then there must be no wrongdoing. I disagree with that in this case and from personal experience. Apple's developer relations people are generally able to understand and sympathise with extraordinary circumstances. Such as they did in this case.


Kapeli did not commit fraud. But that does not mean Apple was incorrect in linking the two accounts. In fact, 20 seconds into the call, the Apple rep says

> We don't believe that there was a mistake here, right. We don't think that we made a mistake.

So no, Apple is very explicitly saying they were not in error.


I agree. But then why force him to write a PR blog post in favor of Apple?

That's what's really wrong here.


It was to give him an "out" to resolve the issue in a way that's positive to both of them. He didn't have to write a PR blog post. He just had to state the facts:

His account was linked to one involved in fraudulent activity.

He's working with Apple to get his account unlinked from the fraudulent one.

That's it! He doesn't have to admit wrongdoing and Apple (despite being very confident they didn't make a mistake) gives him the benefit of the doubt and unlinks the account. Instead, he decided to dig his own App Store grave.


Because he wrote the blog post that started this whole thing and accused Apple of doing the wrong thing. Apple just wanted him to essentially post a correction.

They're saying they think they did not make an error. That's entirely separate from what happened in reality. Besides, even if they say they think it, that might just as well be rethoric.

Rhetoric? They make it very clear in the call that they believe their view is an accurate representation of reality. Maybe you should actually listen to the call.

It's rethoric because their stated beliefs clash with the facts of reality they admit to in that call.

That doesn't make any sense. Are you saying that Apple admits to certain beliefs, and to certain facts that contradict those beliefs, in the same call? Because I'm pretty sure they don't. They explain that the accounts were linked and that they don't think they made a mistake in linking those accounts. And they offered the developer a way to unlink the accounts and restore his account without the developer having to admit to wrongdoing. But nobody seems to be disputing that the second account was engaged in fraud, and Apple gave some perfectly reasonable reasons for the two accounts to have been linked.

> Are you saying that Apple admits to certain beliefs, and to certain facts that contradict those beliefs, in the same call?

Yes, and it boils down to one thing:

Either the termination of his account was correct, and should be upheld; or it was wrong, and should be rescinded.

There are many times in life when things are in a range of grey between black and white, but this case is entirely black and white. Either they made an error with the termination or they didn't. If they made an error the account should be reinstated without question, delay or condition. If they did not make an error it needs to remain closed.

By the very fact that they are willing to reinstate it, they admit to the fact that the termination was in error, regardless of what they believe of say they believe.

Doublethink is real.


This is nonsense. It was perfectly reasonable for Apple to terminate Bogdan's (the Kapeli dev) account. This doesn't mean Bogdan did something wrong. What it means is Bogdan's relative, who controls the second linked account, did something wrong. And Bogdan shares some responsibility because he set up that second account (Apple did not link the two accounts incorrectly).

And the fact that Apple's willing to work with Bogdan to unlink and reinstate his account also does not mean Apple did anything wrong. If you actually listen to the phone call the Apple rep makes it very clear that Apple believes they were correct, but that Apple is willing to offer Bogdan a way to fix things.


> It was perfectly reasonable

Well, we'll have to disagree. And i think Apple's actions, in giving the option of reinstatement, disagree as well, even though they claim to believe otherwise.

Edit: Oh, and even if something were to appear reasonable to do, but turned out in hindsight to be wrong, then it would still be an error.


The fact that they are willing to reinstate him show only on thing, a good customer policy.

And this is quite a similar to what you might experience if you ever go to a Genius Bar when you are somewhere in a range of grey as I once was.


Why is a random developer (out of millions who have not had this issue) immediately trustworthy, while Apple (who has no financial interest in banning him) is assumed to be untrustworthy?

The Apple representative also stated that the accounts were the same legal entity (due to the accounts being based on the same bank account). I don't think it's necessarily an error for them not to contact all involved accounts if they share something as private as a bank account.

Them linking accounts by some heuristic does make them the same /legal/ entity. Shared bank accounts/accounts with multiple owners do exist. They bet that their heuristic is correct. In this case they might have gotten it wrong. That's their problem.

Do they make people aware that the accounts are linked?


It's in the Apple Developer Program License Agreement. You're responsible for anything that happens with your stuff while it's enrolled under your name.

In a lot of countries, bank account is just the standard way of paying for everything.

It could be the bank account used for receiving proceeds from app store sales they are talking about.

It’s also possible he misspoke and was referring to the credit or debit card (and thus the account it was for) used to open the dev account.

No, there is absolutely no legal case here whatsoever. Apple's developer program terms grant them virtually unbridled power to do whatever they want with your developer account no matter how fair or how unfair. You have no legal right to have a developer account. Normal business contractual negotiations (as these are) are not blackmail.

Alright. I can go along with it not being blackmail from a legal perspective.

Morally it absolutely does remain blackmail.


I thought it's been proven that terms of service can't override or be a substitute for like... other laws. It's possible to find the terms of service invalid.

Apple's warranty policy that users 'agree with' has been over turned in many many countries.


Apple's not blackmailing him. That's ridiculous. Apple was entirely within its rights to suspend the account. Apple's offering the developer an easy way to get his account back that doesn't even require buying a new one.

They blackmailed him into writing a blog post detailing his actions. That's pretty thin soup.

According to his blog post, the developer sent his blog draft to Apple and hadn't yet heard back.

He then today refreshes Loop Insight / iMore and reads "According to Apple, all attempts to work with the developer have failed".

Was the press release really Apple's answer to the blog draft? Was it meant to torpedo the ongoing "blog negotiation", or independent of it?


I'm assuming it was completely independent. And when they said attempts failed, this was before the account was terminated. It's not referring to any communication with the developer post-termination.

Re-reading today's press releases, Apple's statements perhaps read as if they're delayed responses to the initial story (and are oblivious of the "my cousin did it" angle currently being talked through on the phone).

But the Dash developer clearly read the press releases as responses to the ongoing communication, rejections of his draft blog post. In his view they made a new decision and went to the press with it. Account ban final. He has nothing to lose by posting his telling of the events and the audio.

> Tonight Apple decided to accuse me of manipulating the App Store in public via a spokesperson.

It's really unfortunate for both sides if this drama is the result of bad timing and/or siloed organizational departments.


I think you're correct. I too read Apple's statements today as being something prepared ahead of time (possibly even communicated to the media earlier and embargoed), wholly independently of Apple's ongoing talks with Kapeli about the blog post.

After listening to the call it does seem like Apple didn't do due diligence and notify all parties involved. They notified the owner of the dev account, but not the owner of each account that was going to be deactivated. Doing this could have prevented the misunderstanding.

I'm sure there was much more communication than just that call. Apple, in a previous statement, said "Warning was given in advance of the termination and attempts were made to resolve the issue with the developer but they were unsuccessful"

Listen to the phone call. He asks them why they contacted only the owner of the linked account and not the details on his account before closing his account, and Apple does not deny they failed to contact him and only says "cause they were linked".

There was no other communication with Kapeli.


They also told him that, from their perspective, the two accounts belong to the same entity because they have the same payment details and test devices.

There was no reason for them to know that this developer purchased an account for someone else and gave them his test devices (which sounds like an excuse anyone accused of anything gives when they're caught).


Apple would also be aware that various sets of contact data are attached to those accounts, but ignored them. The linking is furthermore also only done on their side via metadata, and not communicated to, or done by, the developer.

Of course the linking isn't communicated to the developer. It wouldn't be an effective anti-fraud mechanism if it was.

I'm not saying they should. I was just enumerating some ways in which notice could've reached him, but didn't, in response to the GP post trying to claim he was notified.

Eh? It's very vague in the blog post, but it sounds like the developer paid for an Apple account and the device which were used to create fraudulent reviews. That last looks quite bad and makes Apple's position more understandable. Why isn't the developer explaining what happened with the dev account that they opened and funded? You can't just say "I haven't done anything wrong" under those circumstances without explaining who controls the offending account and why they might be manipulating App Store reviews.

Did we read the same article? He used his credit card to pay for a friend's developer account and gave her one of his old devices to test on. Though he didn't mention it (sticking to facts) it looks like he was teaching someone how to make an iOS app and provided a bit of charity.

...and mysteriously, this friend spontaneously began posting fraudulent reviews relating to this guy's app?

Sounds like bullshit to me.


They didn't relate to Kapeli's app at all, other than that the account on which they were made was created by his credit card and on an old machine he gave away.

Now, on the friend’s (relative, actually) apps. She continued to use the account, published 20-odd crappy apps and paid for fake reviews for these apps.

Which sounds like a load of bull to me, but is ultimately irrelevant. As if someone wjo didn't even know how to set up an account and didn't have their own devices is going to engage in fraud.

He got caught and didn't realize they would make the connection, so he's blaming someone else.


Don't assume the fraudulent reviews were intentional by either party. Spam systems are well-known to post reviews of completely unrelated products in order to make their intentional fraudulent activity appear more legitimate. It happens on Amazon, Yelp, basically everywhere.

It's the same tactic that makes Facebook advertising so useless. You have millions of fake people posting regular fake "updates" complete with fake GPS locations just so that some of them can provide fake traffic for pages when someone pays.

I want to see the proof that the reviews were fake in the first place and I want to see all the reviews posted by these supposedly fake users.

It probably won't happen but here's to hoping. Maybe some public visibility into these sorts of things will breed sympathy for Apple's position because it's a real problem and it's very difficult to solve.


The question is why was that account involved in review manipulation

Because he skipped the lesson about Apple having automated systems to catch review manipulators. So this newbie developer had some marketer friend whisper in her ear, "hey you can hire these guys to promote your shitty little food app, it's like $200 and I know someone who did it and made a billion dollars"

I think the fact that he was not notified about this suspicious activity on linked account renders all this as Apple wrong doing. Doesn't matter whether Dash dev actually gave his phone to someone or actually was doing something fishy by himself, failing to notify account before closing it just doesn't seem fair to me.

The flip side of this story is ...

How would you feel if someone swiped a copy of your cc, started an apple developer account, did a bunch of review freud and then got you kicked out of the app store.

I think there are some serious issues around due process with account termination. If something like this was sent originally this would be a non issue.

> We detected freud from account X that is linked using your credit card number to account Y. ... bla bla bla freud is bad ... respond within N hours or have your account terminated.


Your hypothetical doesn't match reality. The accounts were linked through more than just the CC, and the CC wasn't stolen anyway (presumably Kapeli didn't change the CC on his account, and the charge for the new account was never contested). And there's probably more than just the CC and test devices anyway, Apple probably used things like detecting that a computer used with one account was used to create the other, or the creator of the second account was currently logged in using the apple ID of the first, or something like that (but they probably don't go into detail about this because they don't want to tell fraudsters how to avoid detection).

After listening to the call recording, I can't see how Apple was being all that unreasonable with the guy.

I suspect that his recording and posting audio of that call is going to blow up in his face. Especially if he broke any laws by doing it.


Undisclosed call recording is a really bad idea.

Depends on the state. Most states are "one party" where only one party (i.e. a person making or receiving a call has to know about it).

http://www.dmlp.org/legal-guide/recording-phone-calls-and-co...

Federal law is "one party" as well.


The US law doesn't apply here... he is in Bulgaria I think?

Edit: Romania.


Lessons:

  - Apple considers Developer Program memberships "linked to the same entity" if they are paid for by the same credit card.
  - If one of these accounts violates rules, all accounts of this entity are being closed.
  - As always, it's difficult to get any useful information from Apple.
  - Apple will listen and try to find a reasonable solution – at least if the public backlash is big enough.
In my opinion, Apple should communicate this more clearly and, upon closing an account, provide all relevant information to the membership holders as well as providing a means of appeal. Mistakes do happen.

I welcome Apple's crackdown on fradulent activity. However, as an iOS developer, stories like these are the reason why I don't want to bet my livelihood on distributing apps through the App Store. While the risk of having my app rejected or account closed for no particular reason is small, it's still there. Are developer's voices being heard, even if they don't have a blog and a twitter account? My experience with Apple's Bug Reporter says no.


Not only credit cards. Hardware can link accounts too, so be very careful whom you gift or sell your old computers to.

This is the first I've ever heard of the concept of "linked" Apple developer accounts. I suspect most people won't come across this particular issue but it's just another fun app store concept.

It's particularly interesting to see that they are cross-checking registered test device UDIDs across developer accounts.

Suddenly UDIDs need to be kept confidential, or a fraudster might add a high profile developer's UDID to their own developer account and then drive it into the ground.

Doing iOS consultancy work for other people's dev accounts could also be more risky than expected now if you use your personal test devices there.

Remember also that there are probably thousands of third party databases out there linking millions of UDIDs with real world identities, as it is only in the last few iOS versions that the device uniqueIdentifier API started returning blanks. Earlier, many apps and adtracking libraries almost certainly would include the UDID in server calls during login etc.


> Doing iOS consultancy work for other people's dev accounts could also be more risky than expected now if you use your personal test devices there.

I don't think so. The fact that you have your device registered on two different accounts is unlikely to be sufficient to link the two accounts. It's merely one of the ways in which the accounts were linked. Using the same CC and/or bank details is another. And there's probably other links too that Apple didn't disclose (because they're only effective at combating fraud if fraudsters don't know about them).


I do agree with your points here. Still gives me some pause with how I treat my UDIDs going forward.

You're reading into this too much. If this were happening all the time and people were raising concerns left and right, then yes--it'd indicate this was caught by an automated system that makes big assumptions.

That's not the case here. They reiterated many times on that phone call that they're sure they didn't make a mistake and they have no financial interest in banning his account. They gave him an "out" by letting him post a carefully worded post without even admitting wrongdoing and he instead recorded their phone call and posted part (!) of it on his blog.

How people are seeing Apple as in the wrong here is mindblowing.


It's a fun concept when dealing with any kind of anti-fraud measures. I highly doubt the App Store is the only place where accounts can be considered linked.

"What I’ve done: 3-4 years ago I helped a relative get started by paying for her Apple’s Developer Program Membership using my credit card. I also handed her test hardware that I no longer needed. From then on those accounts were linked in the eyes of Apple. Once that account was involved with review manipulation, my account was closed."

Sounds a little fishy to me. I'm not saying that he was aware of or involved in review manipulation that was coming from his "relative's" Apple Developer account that he happened to pay for.

But I wouldn't bet money that he wasn't.

And the fact that he feels the need to mention giving said relative "test hardware that I no longer needed" suggests that said hardware might have been involved in the alleged review fraud.

I don't think this will end well for this guy.


Also, aren't credit cards valid for 4 years? Either he had completely new card at the time or it's a bit fishy.

I wonder how many other developers have unknown "linked" accounts with a former coworker or business partner.

sounds like the developer got screwed by his relative, not by Apple

I doubt a relative would post literally thousands of fake reviews over the course of many months without the dev's knowledge

Read the post again. Kapeli paid for the dev fee for an account he did not make or control, and gave the person controlling that account hardware he had bought. Apple proceeded to pull a facebook and marked the two accounts as linked and treated them as being the same person. Then the person controlling said account started doing shady stuff, followed by Apple dinging them, but failing to actually follow up with Kapeli's account to see whether that one is actually and in reality controlled by the same person.

The relative was acting only on their own and likely not even aware that what they were doing could hurt Kapeli, and vice versa.

And Apple knee-jerked without questioning their assumptions.


This.

Apple should be contacting the App's official developer account link to the App Developer, or all accounts linked to the App's Developer, not just the discovered linked Account. After all, isn;t the official account the one bound by the license and terms of use for the developer's app?

If Apple chooses not to notify the App developer's via his official account, but the discovered account. Well, then only the discovered account should be deactivated (and not impact the App).

Would apple send a password reset to the discovered linked account or the official account contact? We could insert a few jokes here, but obviously the answer here is the official account email.


On the other hand, while this might not be the way Apple should have communicated. They do have a point.

A linked account was involved in fraudulent activity. Its easy for anyone to say 'Oh, i just paid for that and gave my hardware but thats not mine'. Still doesn't change the reasons for suspicion.

It does suck since I really like Dash. One reason why you should not share/use your work CC/bank accounts and Hardware for non-work reasons.


> but failing to actually follow up with Kapeli's account to see whether that one is actually and in reality controlled by the same person

That doesn't make sense. We're talking about anti-fraud measures here. If they contacted the other account and said "hey are you the same person as this first account?" a fraudster would always say no even if the same person controls both accounts!


There are various ways to verify. Photo id, state id, holders of other associated credit cards (particularly where the cash for the app payments go to). I'm not saying they should ask nicely, but do due diligence.

Apple is right here and their decision makes sense. Honestly he's lucky they are even letting him rejoin the program.

Apple and Google and the Walled Gardens they've constructed seriously need some regulation and need to be considered "common carriers" which provide a service to the general public without discrimination.

Telephone companies are one such an example.

If you paid the bill of your friends phone one month, and later the phone company got into a dispute with them and cut off the phone that you do business on out of your home office -- and then refused to reinstate your phone line unless you publicly apologized to them, I suspect the FCC would not approve of their actions.

Apple has way more power in this situation and is much more of a monopoly over many software developers lives, but is operating by rules that it makes up itself.


Wow!!! story changed after listened the call. I don’t think Apple did anything wrong in this.

So, Apple wanted to secretly pay the developer (via removing a penalty they had imposed) to produce PR material regarding the trustworthiness of their actions in the Developer Program.

That's pretty much the same thing they claimed was the basis of the account suspension, if you think about it. Guess it's a "good for me, but not for thee" kind of thing.


Generally, if you have to turn the situation inside out like a sock to make a point, it's not going to seem very convincing.

Really good point. Apple wants him to make a fake review.

Always record your calls if the other side is.

The audio didn't start from the beginning so it is hard to say if they notified that they were recording, but in California, all parties must consent if one wants to record a phone call.

https://en.m.wikipedia.org/wiki/Telephone_recording_laws#Uni...


Since the dev behind Dash is based in Romania[1], is this law still applicable?

[1] https://blog.kapeli.com/about


Only if you can get a Romanian judge to extradite him to California.

Also, aren't European ios developer accounts and agreements usually handled by iTunes Luxembourg or iTunes Ireland?

He's from Romania..

How to get an app banned from the app store:

Spend $5000 at Fiverr or similar on bogus reviews.

.. There are no more steps.

This also works with SEO. You can spend under $100 at Fiverr for thousands of backlinks, get your website flagged by Google and the website needs to manually remove those backlinks in their console (which takes days, if not weeks to track down the flagged links).

Rinse and repeat on your competitor once a month to ruin their online presence.


Sometimes, I miss Steve Jobs.

(In case my oblique comment isn't clear enough: Time for someone with real authority to cut through the crap on Apple's end.)


Oh so he GAVE is old hardware and GAVE his credit card to this relative. How conveniently coincidental.

I think Apple did fine here, actually.


Is it legal in the US to record a phone conversation without both parties being aware they are recorded?

He's not in the US

This is dumb. He's risking a significant amount of his livelyhood for a company that doesn't really care all that much about him and he's calling them out in public.

Dumb move. Most people will forget about this in a week and his business will be affected for months (in the shortest possible time frame) and probably permanently.

This is a dangerous bluff to make.


Probably not.

Dash is mostly a desktop app and he can keep on selling it outside the MAS.


Easy. Apple acted prematurely on a Kapeli mistake he doesn't admit.

His summary doesn't at all reflect what was in the phone call that he posted. He says that Apple insisted he admit wrongdoing, but the representative from Apple was very clear about the three points he wanted expressed (his account was "linked to an account with fraudulent activity", he's working with Apple to unlink the accounts, and that he's working with Apple to get back into the program). He even specifically says that he won't admit any wrongdoing, and the Apple representative didn't take issue with that.

There are multiple communications and phone calls in play. It was a previous phone call on Friday that required admitting wrongdoing.

> on FRIDAY they told me they’d reactivate my account if I’d make a blog post admitting some wrongdoing. I told them I can’t do that, because I did nothing wrong.

> On SATURDAY they told me that they are fine with me writing the truth about what happened. [this is the call that was recorded]




Guidelines | FAQ | Support | API | Security | Lists | Bookmarklet | DMCA | Apply to YC | Contact

Search: