The Lies that is Wi-fi Widget
As I wrote before, I’m learning swift. One of the easiest ways for me to get started is to start a small project, while reading a bunch of documentations and sample codes in swift while figuring out how to think in swift.
Enters Wi-fi Widget. I notice the basic premise of this app is quite interesting, getting and sharing Wi-fi password. It should be perfect for learning swift, not a lot of API calls and I'll need to look through part of the documentations that I'm not familiar with. But searching up-and-down the Apple documentations (and asked StackOverflow), I can’t find anything to securely access iOS Keychain for Wifi password. Detecting the SSID on the other hand, is just 4 lines of codes.
These two extra snapshot that shows exactly how the app works are completely omitted from both their own website and app descriptions. Classic bait & switch. This also throws your basic security out of the window, “never share your password with untrusted third party.”