News for hackers. Stuff that matters.

A comment on Apple approves previously rejected HKMap.live app. Parent comment

Re:Apple approves previously rejected HKMap.live app by simion314 on Friday October 04, 2019 @05:22PM (#21162029)
Apple developers are smart enough to sandbox a browser and have the installer processes secured enough, there are so many ways to do it.
[ Parent | on HN ]
Re:Apple approves previously rejected HKMap.live app by _bxg1 on Friday October 04, 2019 @05:28PM (#21162066)
The point is that every layer helps. It's bad security practice to build a single layer of defense and call it a day. People always find a way through.
[ Parent | on HN ]
Re:Apple approves previously rejected HKMap.live app by simion314 on Friday October 04, 2019 @05:32PM (#21162092)
Who said only 1 layer ?

You sandbox the browser

you put the installer on a different user

you make the installer always open a popup

you ask for the password/pin

If a JS script can bypass all of this then you have a bigger problem, the malware developers can easily already have a dummpy app already in the app-store that is signed by Apple, the installer signature is the last thing you should worry about in this case (better disable JS now)

[ Parent | on HN ]