3 ms·

I wonder if Zoom can get in trouble for spilling the beans on this private entitlement.

• xuki 6y ago
  No, it's public information if someone wants to find out. This is the full entitlement of Zoom https://pastebin.com/0qHP2v1F https://pastebin.com/0qHP2v1F Now it would be interesting to automatically download all the popular app every update and find private entitlements.
  • kmeisthax 6y ago
    Given that all App Store apps are encrypted with FairPlay DRM, and only accessible on a device filesystem that users cannot read, is it necessarily public? Like, I'm pretty sure you have to be jailbroken in order to even read that entitlements file.
    • xuki 6y ago
      This was pulled from an encrypted IPA.
      • kmeisthax 6y ago
        Right, but my point is that it's still not public information what entitlements apps use. Apple's policy is that users should not be able to read the contents of encrypted IPAs at all. The fact that you can do it doesn't make the information public - you have to go through extra steps, many of which are illegal to explain to you in most parts of the world, to be able to decrypt IPAs and read out the entitlements file therein. As an example of how zealous Apple is about keeping apps encrypted; they even disable iOS app support entirely on M1 Macs if you've unlocked the hardware for third-party or modified operating systems: https://twitter.com/never_released/status/1390707411930001408 https://twitter.com/never_released/status/139070741193000140...
        • xuki 6y ago
          Nothing I did was illegal. I downloaded an IPA file with Apple Configurator 2, the binary inside it was encrypted. However it was possible to read the entitlement without decrypting the whole binary. One can certainly automate this process if one can figure out how to download IPA file automatically.