4 ms·

Your iPhone cannot get hot because of protections built into the platform. Apps are heavily restricted in the damage they can do (and the runtime they can have)

Your iPhone cannot get hot because of protections built into the platform. Apps are heavily restricted in the damage they can do (and the runtime they can have). No app can render your phone unusable unless it exploits these protections. The real thing keeping people safe is the operating system itself. The App Store is just a revocation mechanism for when something defeats those platform protections. That is what Developer ID is about on macOS: a revocation mechanism, only activated when platform security is breached. People think that sideloading means Apple can’t scan for malware… Apple signs every single notarized binary

wincy 5y ago
Like when Epic dangerously breached Apple’s security by allowing users to pay them directly for Fortnite skins.
- conradev 5y ago
  Of course – Apple's App Store policies go beyond security, which is why it is critical for different stores with different policies to be able to compete. Its role in the threat model, though, is limited to automatic scanning and revocation. That is also to say that if Apple does open up the platform to alternate stores, I imagine they will still control the security portion.
  - deleted 5y ago
    [deleted]
EMIRELADERO 5y ago
We're still at the same problem though, which is that Apple ultimately ends up having the final say on what apps get to run on consumer's devices.
- conradev 5y ago
  Well, the real and underlying problem causing this is that they have the final say on what operating systems can run on iPhones. They don't do this for Macs. Ultimately, though, someone needs to maintain a database of malware. When this malware is attacking the platform, it kinda makes sense for the platform maintainer to maintain the database. Microsoft maintains the Defender database, which does have false positives, and we thank them for it. If you want to override it, you can. Notarization works the same way on macOS. That said, the neutrality of the database (malware only!), and the ability to override it are both key components.
deleted 5y ago
[deleted]

wincy 5y ago

Like when Epic dangerously breached Apple’s security by allowing users to pay them directly for Fortnite skins.

conradev 5y ago
Of course – Apple's App Store policies go beyond security, which is why it is critical for different stores with different policies to be able to compete. Its role in the threat model, though, is limited to automatic scanning and revocation. That is also to say that if Apple does open up the platform to alternate stores, I imagine they will still control the security portion.
- deleted 5y ago
  [deleted]

EMIRELADERO 5y ago

We're still at the same problem though, which is that Apple ultimately ends up having the final say on what apps get to run on consumer's devices.

conradev 5y ago
Well, the real and underlying problem causing this is that they have the final say on what operating systems can run on iPhones. They don't do this for Macs. Ultimately, though, someone needs to maintain a database of malware. When this malware is attacking the platform, it kinda makes sense for the platform maintainer to maintain the database. Microsoft maintains the Defender database, which does have false positives, and we thank them for it. If you want to override it, you can. Notarization works the same way on macOS. That said, the neutrality of the database (malware only!), and the ability to override it are both key components.

deleted 5y ago

[deleted]