3 ms·
The following was posted on Macrumors. Definitely not a perfect user-first response from Apple, but didn't seem terrible either. Particularly because Apple wasn
by IkmoIkmo 5y ago
The following was posted on Macrumors. Definitely not a perfect user-first response from Apple, but didn't seem terrible either. Particularly because Apple wasn't the source of the issue, the issue was people downloading an unofficial XCode tool not made or hosted by Apple. Apple discovered it (just like many researchers did) and made various (non-perfect) efforts to mitigate it. And according to Macrumors, the attack did not really lead to any serious consequences. Not sure if that's true but I haven't seen any evidence to the contrary either.
> Apple did ultimately inform users that downloaded XcodeGhost apps, and also published a list of the top 25 most popular apps that were compromised. Apple removed all of the infected apps from the App Store , and provided information to developers to help them validate Xcode going forward.
> XcodeGhost was a widespread attack, but it was not effective or dangerous. At the time, Apple said that it had no information to suggest that the malware was ever used for any malicious purpose nor that sensitive personal data was stolen, but it did collect app bundle identifiers, network details, and device names and types.
- londons_explore 5y ago> Apple said that it had no information to suggest that the malware was ever used So in other words, it was used only on a few high value targets, rather than being used to serve up ads to all 128M users. Still not much better...
- egberts1 5y agoya think Mac could have a poor hash tag matching for security of its executables, such as Xcode?
- LogicX 5y agoNot according to the article: “For developers to have run the counterfeit version, they would have had to click through a warning delivered by Gatekeeper, the macOS security feature that requires apps to be digitally signed by a known developer.” Worked just fine. Developers circumvented it. Should’ve been the red flag.