3 ms·
Unfortunately this is far from true. It's trivial use private APIs and beat AppStore static analysis. There is also a MITM attack on FairPlay DRM that has enabl
by sjtgraham 10y ago
Unfortunately this is far from true. It's trivial use private APIs and beat AppStore static analysis. There is also a MITM attack on FairPlay DRM that has enabled malware to be installed via AppStore apps.
- kranner 10y agoThanks, I wasn't aware of the latter, but looks like it requires a user to install a Windows client called 爱思助手 (Aisi Helper), purportedly for jailbreaking etc., then connect their iOS device to a Windows PC running this software. So it's hardly a typical case. Reference: http://researchcenter.paloaltonetworks.com/2016/03/acedeceiver-first-ios-trojan-exploiting-apple-drm-design-flaws-to-infect-any-ios-device/ http://researchcenter.paloaltonetworks.com/2016/03/acedeceiv... Regarding the former, yes it may be possible to hardcode addresses for private APIs and target specific devices running specific iOS versions, but Apple routinely weeds these out. Edit: I assume Apple weeds these out. I have no reference for this. I realize it's not bulletproof, but it's still good enough to trust for me as an iOS user compared to the Android phone I was using until last year.