Popular Chinese iOS apps compromised in malware attack

Re:Popular Chinese iOS apps compromised in malware attack by aianus on Saturday September 19, 2015 @01:51AM (#10243432)

The internet in China is so bad developers at Tencent download Xcode from random links on Chinese Dropbox? Pathetic.

[ Parent | on HN ]

Re:Popular Chinese iOS apps compromised in malware attack by sigterm on Saturday September 19, 2015 @02:08AM (#10243459)

It's bad when crossing the border. Rumor says it's due to traffic analysis by the GFW. I cannot find any source to prove or disprove that though.

[ Parent | on HN ]

Re:Popular Chinese iOS apps compromised in malware attack by mahyarm on Saturday September 19, 2015 @04:13AM (#10243673)

The internet being bad is done on purpose. They don't have to make it shit with the traffic analysis, since internal traffic has traffic analysis too. They do it to keep china's internet an internal, more easily controllable intranet.

[ Parent | on HN ]

Re:Popular Chinese iOS apps compromised in malware attack by rahimnathwani on Saturday September 19, 2015 @09:24AM (#10244216)

I think it has more to do with lack of competition in the ISP market. In most places, there's only one fixed line broadband provider, so there's incentive to increase speeds (as people will pay to get better quality streaming video on multiple devices) but none to improve peering with overseas networks.

[ Parent | on HN ]

Re:Popular Chinese iOS apps compromised in malware attack by gaotongfei on Saturday September 19, 2015 @05:40AM (#10243811)

sad but true

[ Parent | on HN ]

Re:Popular Chinese iOS apps compromised in malware attack by envy2 on Saturday September 19, 2015 @03:29PM (#10245295)

I've been fortunate enough to have access to non-GFWed bandwidth to play with on several occasions, and my experience would seem to suggest this is accurate. I can easily sustain 60mbps to the US when not subject to the GFW, but when using normal non-exempt bandwidth from the same (domestic) provider, could only sustain 5-10mbps. China's network architecture in Tier-1 cities is largely fine, and it's really the GFW that throws a wrench in things internationally.

Data localisation regulations are certainly one reason for foreign companies to set up local infra, but IMHO the real reason is that it's the only way to provide an even remotely tolerable user experience to users in mainland China. Aliyun is basically AWS for China and is very easy to get up and running, and getting an ICP license wasn't nearly as hard as everyone makes it out to be (got one in ~2 weeks from application).

[ Parent | on HN ]

Re:Popular Chinese iOS apps compromised in malware attack by forumuid on Sunday September 20, 2015 @10:02PM (#10250006)

The Cause is your exempt bandwidth,or how to explain why downloading other big files crossing the border through GFW is not so slow as Xcode?

[ Parent | on HN ]

Re:Popular Chinese iOS apps compromised in malware attack by forumuid on Sunday September 20, 2015 @09:24PM (#10249926)

NOT GFW, just concerning Apple's money. Chinese have downloaded so much HD video crossing the border through the GFW,but the speed is not so slow as Xcode downloading.

[ Parent | on HN ]

Re:Popular Chinese iOS apps compromised in malware attack by forumuid on Sunday September 20, 2015 @09:18PM (#10249909)

Even apple has earned so much money from chinese,there are no CDN server for distributing Xcode in China.

[ Parent | on HN ]

Re:Popular Chinese iOS apps compromised in malware attack by geon on Saturday September 19, 2015 @02:46AM (#10243530)

And dont run a checksum.

[ Parent | on HN ]

Re:Popular Chinese iOS apps compromised in malware attack by majke on Saturday September 19, 2015 @05:56AM (#10243833)

A checksum can only tell you if the file is identical to another. Even if it did - you downloaded the file from untrusted location for a reason - you don't have access to original source.

Checksums are useless if you don't have access to an alternative source.

[ Parent | on HN ]

Re:Popular Chinese iOS apps compromised in malware attack by rsy96 on Saturday September 19, 2015 @07:11AM (#10243951)

Xcode.app includes a digital signature, which can be checked with `codesign`. As all OS X comes bundled with Apple's root certificate, one can check for the validity of that application by oneself without any additional trusted source.

Or if the developers never disable GateKeeper and read the warning, they will know that the application is not genuine.

[ Parent | on HN ]

Re:Popular Chinese iOS apps compromised in malware attack by pki on Saturday September 19, 2015 @08:15AM (#10244072)

Of course being China, of course Gatekeeper is totally disabled and no one has valid signatures on anything unless it's absolutely required

[ Parent | on HN ]

Re:Popular Chinese iOS apps compromised in malware attack by paradite on Saturday September 19, 2015 @05:59AM (#10243837)

> you don't have access to original source.

Not true, they have access to original XCode (and checksum), but the download speed is very slow.

[ Parent | on HN ]