4 ms·
No, it's public information if someone wants to find out. This is the full entitlement of Zoom https://pastebin.com/0qHP2v1F https://pastebin.com/0qHP2v1F Now
by xuki 5y ago
No, it's public information if someone wants to find out. This is the full entitlement of Zoom https://pastebin.com/0qHP2v1F https://pastebin.com/0qHP2v1F
Now it would be interesting to automatically download all the popular app every update and find private entitlements.
- kmeisthax 5y agoGiven that all App Store apps are encrypted with FairPlay DRM, and only accessible on a device filesystem that users cannot read, is it necessarily public? Like, I'm pretty sure you have to be jailbroken in order to even read that entitlements file.
- xuki 5y agoThis was pulled from an encrypted IPA.
- kmeisthax 5y agoRight, but my point is that it's still not public information what entitlements apps use. Apple's policy is that users should not be able to read the contents of encrypted IPAs at all. The fact that you can do it doesn't make the information public - you have to go through extra steps, many of which are illegal to explain to you in most parts of the world, to be able to decrypt IPAs and read out the entitlements file therein. As an example of how zealous Apple is about keeping apps encrypted; they even disable iOS app support entirely on M1 Macs if you've unlocked the hardware for third-party or modified operating systems: https://twitter.com/never_released/status/1390707411930001408 https://twitter.com/never_released/status/139070741193000140...
- xuki 5y agoNothing I did was illegal. I downloaded an IPA file with Apple Configurator 2, the binary inside it was encrypted. However it was possible to read the entitlement without decrypting the whole binary. One can certainly automate this process if one can figure out how to download IPA file automatically.