Apple revoked longtime Mac developer's code signing certificate with no warning

Re:Apple revoked longtime Mac developer's code signing certi... by mkathuri on Tuesday August 04, 2020 @10:08AM (#24050103)

From the page: https://developer.apple.com/documentation/xcode/notarizing_m...

> Notarization is not App Review. The Apple notary service is an automated system that scans your software for malicious content, checks for code-signing issues, and returns the results to you quickly. If there are no issues, the notary service generates a ticket for you to staple to your software; the notary service also publishes that ticket online where Gatekeeper can find it.

Perhaps the software connected to a website that was flagged as malicious by Apple. That’s one way I could see it getting flagged.

[ Parent | on HN ]

Re:Apple revoked longtime Mac developer's code signing certi... by Reason077 on Tuesday August 04, 2020 @10:58AM (#24050617)

The developer's website (software.charliemonroe.net) is blocked by my ISP (Vodafone UK)'s adult content filter. This is strange as it does not appear to contain any adult content.

I don't think it's related to it being a "YouTube downloader" app either. There are many apps with this functionality and, so far as I can tell, none of the others are blocked.

[ Parent | on HN ]

Re:Apple revoked longtime Mac developer's code signing certi... by gowld on Tuesday August 04, 2020 @11:24AM (#24050882)

Could also be caught sharing an IP range with a banned website :-|

[ Parent | on HN ]

Re:Apple revoked longtime Mac developer's code signing certi... by reaperducer on Tuesday August 04, 2020 @02:41PM (#24053164)

This is strange as it does not appear to contain any adult content.

I've seen a number of times where a compromised web site will have a bit of javascript inserted into it that only shows the malicious payload to certain people from certain geographies or browsing history or operating systems, etc... It might be there, but not showing it to you.

[ Parent | on HN ]

Re:Apple revoked longtime Mac developer's code signing certi... by blibble on Tuesday August 04, 2020 @12:15PM (#24051412)

most of the internet is blocked by those mobile carrier content filters

[ Parent | on HN ]

Re:Apple revoked longtime Mac developer's code signing certi... by reaperducer on Tuesday August 04, 2020 @02:42PM (#24053171)

In 20ish years of using the mobile internet, going back to WAP days, I've never visited a site that was blocked by a mobile carrier content filter.

[ Parent | on HN ]

Re:Apple revoked longtime Mac developer's code signing certi... by Reason077 on Tuesday August 04, 2020 @05:16PM (#24054576)

I've come across a few strange blocks. Recently when researching bread knives I found that the website of the French knife company, Opinel, is blocked by at least two UK mobile carrier's content filters. (www.opinel.com, blocked by Three and Vodafone. Not blocked by O2.)

Their US site (www.opinel-usa.com) is not blocked, however, nor are the many online retailers which sell their knives.

[ Parent | on HN ]