2 ms·
Jeez, I guess so. We're pretty far off track: when I wrote that "[app stores] don't make it possible to target users with malicious updates" up there, what I w
by cjbprime 7y ago
Jeez, I guess so. We're pretty far off track: when I wrote that "[app stores] don't make it possible to target users with malicious updates" up there, what I was talking about was that the app stores aren't giving Foo App's developers the power to push individualized malware to their users, which is a power that Foo App has through its own desktop autoupdater system.
App stores raise the bar from "Foo App decides to own you" to "The DoJ is able to convince a company with the legal firepower of Apple to sign and deliver a backdoored version of someone else's app".
This is.. not a small difference in user risk.
- sneak 7y agoI suppose so, but I am not keeping my conversations secret from the nice folks at OWS, I am keeping them secret from the federal government who likes to lock people up on bogus trumped-up charges for criticizing them or their allies in public; see weev or Roger Ver or Assange for examples. The DoJ threat model is much more likely and much more dangerous than a rogue insider at the app dev shop pushing an update.