3 ms·
The security comes from the sandbox, Apple's curation is pretty mediocre and they only remove malware once it's popular or if it's extremely obvious during the
by swiley 5y ago
The security comes from the sandbox, Apple's curation is pretty mediocre and they only remove malware once it's popular or if it's extremely obvious during the short review.
iOS malware authors tend to publish their binaries as unsigned dylibs and don't need Apple ID accounts so they aren't even banned when they're caught. instead they convince other developers to ship it in seperate apps (there are various ways, money, convenient APIs, both in the case of Facebook.)
- gbanfalvi 5y agoI can guarantee you that the sandbox can be circumvented if you can just run an IPA on the device. iOS has a humongous set of APIs and that attack surface is impossible to protect properly. Don’t get me wrong, I’d love to have an iPhone I can install anything on - but there is _no_ way I would ever install anything from the open internet on the same device use to read my email or log in to my bank.
- swiley 5y agoMost of us don't want to run everything we find on the internet, we want to be able to run one or two apps that Apple doesn't like.