3 ms·
I mean, I get what they're trying to say - I've personally had to deal with computers running all sorts of unwanted adware. But it still rustles my jimmies when
by kmeisthax 5y ago
I mean, I get what they're trying to say - I've personally had to deal with computers running all sorts of unwanted adware. But it still rustles my jimmies when a security system decides I'm too dumb for my own good and I have to jump through hoops to do things Apple doesn't personally approve of.
For example, there's an app called AltStore that enables iOS sideloading, using the developer account access Apple provides to self-sign an IPA. If you want to sideload, this is your best bet, unless you have an older phone that can be jailbroken on the latest iOS. However, in order to actually get at your developer self-signing key, AltStore needs your iCloud password, which is enough access to completely wipe all of your iPhones. I am basically trusting Riley Testut and Riley Testut alone not to pwn me.
The thing is, Apple used to have app-specific passwords specifically to deal with build tools and other things that need your developer key. However, as far as I can tell that was disabled. (at least for people who don't have active App Store developer registrations.) So AltStore has to grab actual user credentials. This is a situation where Apple's own attempts at security have actually backfired: they don't want people sideloading anything, so they make using developer accounts outright painful. Which means that I need to hand over my whole iCloud account (or, if a jailbreak is available, just outright exploit my phone/tablet) just to use emulators Apple doesn't like.
(There's other odd restrictions on free accounts, BTW - for example, free developer accounts can't install VPN apps at all, presumably so that people in China can't evade the App Store VPN ban by sideloading a VPN app.)