4 ms·
All of this could be prevented if Apple allowed sideloading unappoved, but non-security threatening apps. Like when the Steam gaming app that posed zero securit
by writepub 8y ago
All of this could be prevented if Apple allowed sideloading unappoved, but non-security threatening apps. Like when the Steam gaming app that posed zero security threats, that I very much want to use, got banned by Apple for posing a competitive threat!
- joemi 8y agoHow do you determine if it's non-security threatening, though? Isn't that considered an approval process?
- writepub 8y agoOne way is to explicitly prompt the permission-requests prior to actual syscall invocation (as against at install time). The user can then choose to approve or deny. For instance, if a file-manager app is asking to read your SMS, you can opt to deny the permission, unless you're willing to risk the app misusing your data. What they do on the Mac is also acceptable - where they warn you about running apps from unapproved publishers.
- ClassyJacket 8y agoThis is how the iPhone has worked since 2008.
- ikeboy 8y agoYou can if you sign it with your own, free, certificate. It will just expire quickly if free and require constant updating but surely that's an acceptable price to pay.
- writepub 8y agoCan you please elaborate on this. Can a developer distribute iOS apps signed with their own certificate, that iOS will seamlessly allow to install and run?
- ikeboy 8y agoNo. They can install it on their own device, and others can sign with their own certificate and install. Just Google "sideload iOS apps without jailbreak", you'll find all the guides you need.
- saagarjha 8y agoYes, but it requires work (namely UDID registration, and there are limits to this).
- writepub 8y agoThat's not sideloading, is it? It is just developer workflow to enable testing with a wider audience without actually submitting to the app store. By sideloading, I mean the ability to install and run a binary downloaded off the internet. Mac OS allows this, but does put a prompt out. Android allows this as well. No certs, no UDID etc.