3 ms·

> "please don't make me re-download Xcode for 3 hours using an account I forgot thee credentials for in your terrible app store with its un-resumable download f

> "please don't make me re-download Xcode for 3 hours using an account I forgot thee credentials for in your terrible app store with its un-resumable download flow before I can do anything", but they came up with this? I'm glad I'm not alone in that experience. Why the hell do I need an account to get developer tools in the first place?

saagarjha 4y ago
Technically you don't, there's an unauthenticated endpoint discovered recently that lets you grab their tools without requiring credentials. But it's annoying to use :(
- jim180 4y ago
  I use this Xcodes[0] just for that. It does not require login these days and I can switch between Xcode versions. [0] https://github.com/RobotsAndPencils/XcodesApp https://github.com/RobotsAndPencils/XcodesApp
hbbwebw 4y ago
> Why the hell do I need an account to get developer tools in the first place? Because there is a history of rootkits being embedded into development tools. https://9to5mac.com/2015/09/20/xcode-ghost-app-store-malware-malicious-apps/ https://9to5mac.com/2015/09/20/xcode-ghost-app-store-malware...
- ajkjk 4y ago
  Not developer tools that are downloaded from apple.com.
- samatman 4y ago
  This problem was solved years ago with code signing. Running unsigned code requires several hoops, even running signed code which isn't Apple Approved requires telling the OS that you know what you're doing, twice. Running signed code which has been altered, such as a hacked XCode, isn't possible, as far as I know. If this was the reason developer accounts were required, it no longer is. From Apple's perspective, there's only upside in requiring them, which is the most likely explanation for why they do.
- MichaelCollins 4y ago
  How does that have anything to do with requiring users to have an account to download software signed by Apple from Apple's servers? That doesn't make a lick of sense to me.

saagarjha 4y ago

Technically you don't, there's an unauthenticated endpoint discovered recently that lets you grab their tools without requiring credentials. But it's annoying to use :(

jim180 4y ago
I use this Xcodes[0] just for that. It does not require login these days and I can switch between Xcode versions. [0] https://github.com/RobotsAndPencils/XcodesApp https://github.com/RobotsAndPencils/XcodesApp

hbbwebw 4y ago

> Why the hell do I need an account to get developer tools in the first place? Because there is a history of rootkits being embedded into development tools. https://9to5mac.com/2015/09/20/xcode-ghost-app-store-malware-malicious-apps/ https://9to5mac.com/2015/09/20/xcode-ghost-app-store-malware...

ajkjk 4y ago
Not developer tools that are downloaded from apple.com.
samatman 4y ago
This problem was solved years ago with code signing. Running unsigned code requires several hoops, even running signed code which isn't Apple Approved requires telling the OS that you know what you're doing, twice. Running signed code which has been altered, such as a hacked XCode, isn't possible, as far as I know. If this was the reason developer accounts were required, it no longer is. From Apple's perspective, there's only upside in requiring them, which is the most likely explanation for why they do.
MichaelCollins 4y ago
How does that have anything to do with requiring users to have an account to download software signed by Apple from Apple's servers? That doesn't make a lick of sense to me.