Re:Rethinking the App Store
by saagarjha on Wednesday August 26, 2020 @01:42PM
(#24284994)
That argument doesn't make sense, because Apple isn't going to lower the sandboxing requirement for anyone, it's just going to provide an API to install an IPA. (Actually, that API already exists of course, they'll just remove the check that makes sure you're Apple when you call it.) Third parties' security practices have no bearing on how secure Apple makes their own platform–the parent comment is literally saying "Without review, publishing an app [that ships with a zero-day exploit for iOS] becomes trivial"
[ Parent
| on HN ]
Re:Rethinking the App Store
by scarface74 on Wednesday August 26, 2020 @02:00PM
(#24285231)
A third party App Store by definition has permission to download other code. Android also has a sandbox. That didn’t prevent the security vulnerability from Fortnite.
I hate to say it, but did you read the article? Saying "Android has a sandbox" to my comment makes no sense in the context of the issue with Fornite's installer. The vulnerability there was specifically that the third-party app store did not run in a sufficiently sandboxed environment, allowing another application to swap out the app after it was downloaded but before it was installed.
Re:Rethinking the App Store
by scarface74 on Wednesday August 26, 2020 @02:11PM
(#24285383)
So won’t the same people be screaming if Apple puts too tight of restrictions on a third party App Store? If Apple has to approve third party app stores, would people be happy?
I am very confused as to how approval of third party app stores comes into this? The flow I'm thinking of is going to be "you install a third-party app store, which is identical to any other app except it has one additional capability that it takes an IPA and can request that the system install it". Keeping that in mind, is your comment still pertinent? If so, how?