Re:Disclosure of three 0-day iOS vulnerabilities
by eloisius on Friday September 24, 2021 @12:41AM
(#28638703)
It really helps add some color to the motivations behind notorization. It seems ridiculous to me that I have to jump through so many hoops to run an executable that I trust. Especially when Apple can’t be bothered to follow up on real vulnerabilities that have already been reported.
[ Parent
| on HN ]
Re:Disclosure of three 0-day iOS vulnerabilities
by chii on Friday September 24, 2021 @01:27AM
(#28638917)
Exactly - any PR propaganda about notorization or signing making it safer for users is just BS. It's a gate-keeping mechanism that adds a layer of power to apple and prevent any control of the app market from slipping away.
Re:Disclosure of three 0-day iOS vulnerabilities
by noptd on Friday September 24, 2021 @01:31AM
(#28638945)
Along with a solid bit of resume building for SecEng, I'd say yeah exactly that.
Re:Disclosure of three 0-day iOS vulnerabilities
by concinds on Friday September 24, 2021 @02:36AM
(#28639274)
Worse is the fact that the bulk of Apple’s security on Mac is codesigning/notarisation, and a primitive signature-based built-in antivirus. Windows seems to be doing so much better that it’s not even close, and in ways that aren’t user-hostile.