3 ms·
> I'm guessing there are two things Apple is worried about. I'm sure it worries about them but there's a much larger, riskier scenario. Once you start downloa
by JohnBooty 10y ago
> I'm guessing there are two things Apple is worried about.
I'm sure it worries about them but there's a much larger, riskier scenario.
Once you start downloading and executing binary code from untrusted sources (i.e., not the App Store) anything can go wrong.
1. An iOS app doesn't care about security, and it hot-loads code from some non-https source and gets man-in-the-middle'd
2. An iOS app hot-loads code in a secure manner, but the server from which the code is served becomes cot mpromised
3. A malicious employee at an iOS app vendor pushes harmful code out via her company's app
Now, I'm not a fan of Apple's policies. I think there should be a "guys, I know what I'm doing" mode where I'm allowed to download code from untrusted sources. Just like Android or MacOS.
However, I sympathize with them here. For nearly a decade people have been downloading code from the App Store with the understanding that it is safe to do so. Even I appreciate this much of the time... I'm an engineer but I'm busy. I can't audit every app I download. I wish there were other options, but I find huge value in the fact that I don't have to worry about an App Store app screwing my device. And it's a big reason why I recommend iOS despite its flaws to older family members.
- jsjohnst 10y ago> Now, I'm not a fan of Apple's policies. I think there should be a "guys, I know what I'm doing" mode where I'm allowed to download code from untrusted sources. This exists today and has for a long time, it just costs you money for this "privilege".
- praseodym 10y agoYou can compile and run apps on your own devices without a paid developer membership: https://www.google.com/amp/s/9to5mac.com/2015/06/10/xcode-7-allows-anyone-to-download-build-and-sideload-ios-apps-for-free/amp/ https://www.google.com/amp/s/9to5mac.com/2015/06/10/xcode-7-...
- gergles 10y agoThey've nerfed this so that the app will only run for a week before you must push another build.
- bigiain 10y agoYou can drop a .ipa file into iTunes and load/run the app on a phone that's syncing to that copy of iTunes...
- gergles 10y agoGetting the .ipa signed still costs money (or has a week-long timebomb), and you can't run unsigned code.