5 ms·

Of course, it is their platform. The reason they prevent runtime/live updates is because 3rd party developers can and will easily inject malicious code. Apples

Of course, it is their platform. The reason they prevent runtime/live updates is because 3rd party developers can and will easily inject malicious code. Apples owns the entire platform, I have no problem with them having "root" privileges. Honestly I'd rather have a closed platform with strict guidelines than the wild wild west that is Android.

Jyaif 8y ago
Spoken like a true ignorant. What prevents 3rd party developers from embedding "malicious code" in the binary itself?
- xoa 8y ago
  >What prevents 3rd party developers from embedding "malicious code" in the binary itself? Required review by Apple? That malicious code is restricted from doing much precisely by the sorts of things OP is complaining about? The potential economic return isn't as high because Apple can forcefully clean it off? That it's harder to be anonymous when $100/year has to change hands for a cert and Apple wants to know who you are on some level so it'd be at least somewhat harder to avoid them going after you? None of these are bulletproof, even combined. But even so they're not worthless either to that goal. Are you actually asserting that the actual state of malware on iOS is identical or worse then that of Android or Windows/Mac/Linux? That's not something I've seen supported before but I'd read a good source if you've got one.
  - Jyaif 8y ago
    If I want to hide "malicious code" in my binary (whatever that means on iOS), there's no amount of Apple review that will be able to catch it. In fact, even their restriction on downloadable code is not enforceable. This limitation is not about improving security, it's about preventing developers from creating ecosystems inside their apps.
    - saagarjha 8y ago
      Apple will most likely catch whatever you have in mind. If not, they will certainly pull your developer agreement once they figure it out.
    - jonhendry18 8y ago
      Once someone figures out what you're doing Apple can flip the remote killswitch and disable your app.
    - filleduchaos 8y ago
      Given your previous comments, I'd be very surprised indeed if you'd ever even opened Xcode in your life (to talk of actually getting an app you built approved and listed in the App Store). But sure, you totally know how to sneak malicious code past Apple's security processes, and for some completely sensible reason you've neither used it for your own nefarious gain nor reported the exploit and claimed the fat bounty that would inevitably await you.
  - modells 8y ago
    I wouldn’t blame capitalist conspiracy just yet what can be attributed to practical intentions for reasons: 0. Trying to prevent average developers from shooting themselves in the feet too often by having apps that depend on external servers to run, then having a big security incident and Apple being blamed for allowing insecure, third-party code to run. 1. Trying to keep tabs on devs pivoting too far without a re-review. Can’t sell a Farmville app that then becomes a bitcoin wallet which then steals said bitcoins. 2. Keep the quality of apps up by curating through review rather than allowing free, unlimited publishing of random/broken apps. It’s a small barrier to entry and proof that someone invested to make something worth publishing. 3. Malware for old/jailbroken iOS existed way back, but it’s not really a thing, anymore because 0days get mostly either reported to Apple or sold/auctioned off. https://www.theiphonewiki.com/wiki/Malware_for_iOS https://www.theiphonewiki.com/wiki/Malware_for_iOS
- sctb 8y ago
  Could you please stop breaking the guidelines by posting uncivilly and/or unsubstantively? We've asked already and eventually we ban accounts that won't stop. https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html

Jyaif 8y ago

Spoken like a true ignorant. What prevents 3rd party developers from embedding "malicious code" in the binary itself?

xoa 8y ago
>What prevents 3rd party developers from embedding "malicious code" in the binary itself? Required review by Apple? That malicious code is restricted from doing much precisely by the sorts of things OP is complaining about? The potential economic return isn't as high because Apple can forcefully clean it off? That it's harder to be anonymous when $100/year has to change hands for a cert and Apple wants to know who you are on some level so it'd be at least somewhat harder to avoid them going after you? None of these are bulletproof, even combined. But even so they're not worthless either to that goal. Are you actually asserting that the actual state of malware on iOS is identical or worse then that of Android or Windows/Mac/Linux? That's not something I've seen supported before but I'd read a good source if you've got one.
- Jyaif 8y ago
  If I want to hide "malicious code" in my binary (whatever that means on iOS), there's no amount of Apple review that will be able to catch it. In fact, even their restriction on downloadable code is not enforceable. This limitation is not about improving security, it's about preventing developers from creating ecosystems inside their apps.
  - saagarjha 8y ago
    Apple will most likely catch whatever you have in mind. If not, they will certainly pull your developer agreement once they figure it out.
  - jonhendry18 8y ago
    Once someone figures out what you're doing Apple can flip the remote killswitch and disable your app.
  - filleduchaos 8y ago
    Given your previous comments, I'd be very surprised indeed if you'd ever even opened Xcode in your life (to talk of actually getting an app you built approved and listed in the App Store). But sure, you totally know how to sneak malicious code past Apple's security processes, and for some completely sensible reason you've neither used it for your own nefarious gain nor reported the exploit and claimed the fat bounty that would inevitably await you.
- modells 8y ago
  I wouldn’t blame capitalist conspiracy just yet what can be attributed to practical intentions for reasons: 0. Trying to prevent average developers from shooting themselves in the feet too often by having apps that depend on external servers to run, then having a big security incident and Apple being blamed for allowing insecure, third-party code to run. 1. Trying to keep tabs on devs pivoting too far without a re-review. Can’t sell a Farmville app that then becomes a bitcoin wallet which then steals said bitcoins. 2. Keep the quality of apps up by curating through review rather than allowing free, unlimited publishing of random/broken apps. It’s a small barrier to entry and proof that someone invested to make something worth publishing. 3. Malware for old/jailbroken iOS existed way back, but it’s not really a thing, anymore because 0days get mostly either reported to Apple or sold/auctioned off. https://www.theiphonewiki.com/wiki/Malware_for_iOS https://www.theiphonewiki.com/wiki/Malware_for_iOS
sctb 8y ago
Could you please stop breaking the guidelines by posting uncivilly and/or unsubstantively? We've asked already and eventually we ban accounts that won't stop. https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html