3 ms·
Imagine what you could do here: - break into facebook or twitter or any other high profile dev account - reissue new code signing keys - crack the latest public
by 0x0 13y ago
Imagine what you could do here:
- break into facebook or twitter or any other high profile dev account
- reissue new code signing keys
- crack the latest public app and patch in a backdoor
- code sign with new keys and submit as an app update
- agent123 13y agoHow? They took it offline.
- 0x0 13y agoYes, when they discovered it. We don't know for how long they have actually been compromised. Also, imagine if it happens again and is not discovered.
- agent123 13y agoSeems like it's just your imagination: http://www.loopinsight.com/2013/07/21/apple-comments-on-developer-site-hack/ http://www.loopinsight.com/2013/07/21/apple-comments-on-deve...
- 0x0 13y agoThat's why I started the original post with "Imagine..." :) (Plus, a single PR release about one incident doesn't exclude the possibility of other (known or unknown) incidents taking place)