Re:Extracting Data from an Old iOS App Broken by iOS 14.5
by Brian_K_White on Friday May 28, 2021 @03:16PM
(#27319380)
Many people have voiced exactly this problem.
And I would agree it should be outrageous and intolerable.
I wonder if there might be some way for a developer to post their own hashes somewhere, but then there's no good way for an end user to use them to verify their phone.
You could post a web page that reports that Apple has not modified the contents of your app, or a site could do that for many apps, by downloading the Apple-repacked app and checking it, but you could only check the copy of the app that the site downloaded.
It would not prove that Apple didn't modify the individual copy of the app residing on anyones phone.
I don't know the details of ios userspace, but I extremely doubt it's possible for the browser or any other app to read some other apps files and uload them to a site to have them checked. So you couldn't make a 3rd party site that says "check my phone".
Maybe such a report could be made by reading the app out of an unencrypted backup?
And I would agree it should be outrageous and intolerable.
I wonder if there might be some way for a developer to post their own hashes somewhere, but then there's no good way for an end user to use them to verify their phone.
You could post a web page that reports that Apple has not modified the contents of your app, or a site could do that for many apps, by downloading the Apple-repacked app and checking it, but you could only check the copy of the app that the site downloaded.
It would not prove that Apple didn't modify the individual copy of the app residing on anyones phone.
I don't know the details of ios userspace, but I extremely doubt it's possible for the browser or any other app to read some other apps files and uload them to a site to have them checked. So you couldn't make a 3rd party site that says "check my phone".
Maybe such a report could be made by reading the app out of an unencrypted backup?