Re:A top-grossing scam on the App Store
by saurik on Tuesday April 13, 2021 @03:47PM
(#26798104)
Yeah: and for anyone who doesn't immediately see how this is possible, a curator merely needs to have an allow/deny list of apps--possibly specific reviewed binaries--not actually host them or be the bottleneck for obtaining them: you just want the (hopefully federated) store app(s) to be able to refer to the (hopefully federated) curator(s) to limit the display and prevent installs.
[ Parent
| on HN ]
Re:A top-grossing scam on the App Store
by egocentric on Tuesday April 13, 2021 @03:54PM
(#26798222)
Also, from my other comment, Apple could let us sideload notarized apps. This means:
- Automated scan for malware
- Remote kill switch, just in case
They already do this for macOS [1]:
> “Notarization is not App Review. The Apple notary service is an automated system that scans your software for malicious content, checks for code-signing issues, and returns the results to you quickly.”
They could give users a choice, much like they're doing with the new App Tracking Transparency prompt. But when pressed on why Apple should have control, Cook said "Somebody has to."
That's… not a very convincing argument.
[1]: https://developer.apple.com/documentation/xcode/notarizing_m...