5 ms·

Apple's Ability to Deactivate Malicious App Store Apps

• jrockway 18y ago
  I like their almost-but-not-quite JSON format. I am also looking forward to the next version of OS X. No more free software, just DRM's apps from the app store. Computing bliss!!111!
• LogicHoleFlaw 18y ago
  If they really want to test this ability, just set up a DNS proxy to your own server... it looks trivial to spoof.
  • stcredzero 18y ago
    If they're competent, then the deactivation tokens would have to be signed. They're using SSL encryption for this?
    • deleted 18y ago
      [deleted]
    • LogicHoleFlaw 18y ago
      The file at the current link, which supposedly disables a test app, is just a plaintext JSON-like file. No tokens or encryption or anything like that.
      • stcredzero 18y ago
        Yes, but you should be able to use SSL to verify the certificate.