18 ms·
Same thing applies to the current Apple implementation - Malware could disable the application check. If malware has that kind of access (disable blacklist/appl
by yyyk 6y ago
Same thing applies to the current Apple implementation - Malware could disable the application check. If malware has that kind of access (disable blacklist/application-check), the owner has already lost.
- macintux 6y agoMalware has to be able to launch first.
- yyyk 6y agoBoth approaches are meant to stop malware from launching so I don't see much of a difference. Blacklist/whitelist? Whitelist could be implemented locally as well.
- macintux 6y agoMy gut tells me it’s easier to sabotage something passively polling for updates vs something built into the OS that checks at each application launch, but if not, the only difference is the vulnerable window between polling intervals. So, you may be right, may not make much difference. I don’t accept malicious data-mining intent, however.