3 ms·
private api issues are usually caught with automated binary scans. You can obfuscate them to avoid detection but manual review wouldn’t help with that either
by kennywinker 5y ago
private api issues are usually caught with automated binary scans. You can obfuscate them to avoid detection but manual review wouldn’t help with that either
- meibo 5y agoThey can't even fix private API abuse, how do you expect them to scan for it? See: recent iOS exploits.
- vbezhenar 5y agoApple security is based on developer goodwill. If you’ve used private API, you did it by mistake. That’s how their security model works. That’s why they’re scanning binaries for unobfuscated calls. They don’t have an answer against malicious developers other than acting post-factum.