3 ms·
The full Trusting Trust attack would be if you'd use XcodeGhost to compile Xcode and it actually makes another XcodeGhost that just looks like Xcode, right? Pre
by medstrom 5y ago
The full Trusting Trust attack would be if you'd use XcodeGhost to compile Xcode and it actually makes another XcodeGhost that just looks like Xcode, right? Preferably you do this to the developer responsible for uploading the compiled Xcode to central download servers. After a while no one has the real Xcode anymore, it's been lost to time, but no one knows this.