Re:Apple starts rejecting apps with “hot code push” features
by ChuckMcM on Wednesday March 08, 2017 @01:17AM
(#13818350)
My guess is that somewhere in the giant dump of CIA malware there is an exploit that uses this to hijack an iPhone. They are pretty explicit about what they don't like and how it would be exploited.
[ Parent
| on HN ]
Re:Apple starts rejecting apps with “hot code push” features
by bigiain on Wednesday March 08, 2017 @06:03AM
(#13819458)
I suspect unless they got advance notice from Wikileaks this reaction is too soon.
I'm wondering which of the current top-downloaded FlappyCrush Of Titans clone got caught exfiltrating all their players contact lists or something...
Re:Apple starts rejecting apps with “hot code push” features
by malandrew on Wednesday March 08, 2017 @01:24AM
(#13818373)
I'm wondering if one route to preventing this being an issue is to prevent any hot code fixes to specific devices. If you have to hot code push to all devices running a specific version, I reckon that would put a damper on the actions of an institution trying to target a specific person. It's a lot harder to try and be sneaky when a change has such a large impact. That said, I'm not sure this restriction alone would be enough.
Re:Apple starts rejecting apps with “hot code push” features
by matthewbauer on Wednesday March 08, 2017 @01:36AM
(#13818430)
An interesting theory but I kind of doubt the time between the release and this is enough for them to have identified these exploits.