5 ms·
Not debating Apple's overall trajectory, but I think it's cynical to call this a step towards lockdown. Mitigating certificate forgery attacks ultimately increa
by losteric 8y ago
Not debating Apple's overall trajectory, but I think it's cynical to call this a step towards lockdown. Mitigating certificate forgery attacks ultimately increases trust in software distributed outside Apple's walled garden.
- ethbro 8y ago* Assuming Apple never decides to flip certain switches, after the OS infrastructure and hardware support are in place
- sneak 8y agoTurns out that even compiled software can be modified to suit the user’s intent, thankfully.
- ethbro 8y ago(Note: Not talking about Apple now, hypothetically...) How would one do this on a fully trust-chained system with processor support? Barring software bugs that allow for arbitrary code exec as the binary? Signed package + necessary keys embedded in silicon -> processor verfies signature at memory load -> processor disallows user privilege escalation to write to arbitrary memory
- thefounder 8y agoHow is this not lock-down? If Apple doesn't like VLC or whatever software competes with their interests they can simply not renew their membership.
- klodolph 8y agoAre you talking about the old policy? You can run unsigned apps. The new policy affects the process for signing apps.
- fiddlerwoaroof 8y agoBut things like gdb just don’t work unless they’ve been signed. So, if Apple starts blocking unnotarized aogned apps, whether or not these programs will run will depend on whether Apple considers them malicious
- geocar 8y agoYou can still self-sign your apps.
- deleted 8y ago[deleted]