… in the worldwide server. Device reset is huge fiction.
At the time ppl have written tutorial to use old IPA and downgrade apps to a still loginable version so that can sign out. Now of course it is not working as well.
🍎should really fix it ASAP.
https://t.co/13F412qZ4B
Another famous example would be Clash Royale, if you remember March 2022 China server split 💔
When Tencent migrated accounts to mainland servers, they became incompatible with the Global app. However, iOS Keychain tokens cause the app to auto-login to these blocked accounts 🧵
Apple actually tried to fix this glaring privacy issue in iOS 10.3 beta by deleting all keystore (keychain) values once an app is uninstalled.
However too many apps relied on this undocumented 'feature', so they ended up reverting the change before releasing the public version.
… Because these tokens survive app deletion! The Global app automatically re-logs into the blocked Chinese account with no logout button. This creates a loop that requires a full device factory reset to break.
A behavior being abused to prevent user creating new account. 🧵