News for hackers. Stuff that matters.

A comment on Apple introduces Ask Apple for developers. Parent comment

Re:Apple introduces Ask Apple for developers by hbbwebw on Tuesday October 11, 2022 @03:09PM (#33167779)
> Why the hell do I need an account to get developer tools in the first place?

Because there is a history of rootkits being embedded into development tools.

https://9to5mac.com/2015/09/20/xcode-ghost-app-store-malware...

[ Parent | on HN ]
Re:Apple introduces Ask Apple for developers by samatman on Tuesday October 11, 2022 @03:18PM (#33167922)
This problem was solved years ago with code signing.

Running unsigned code requires several hoops, even running signed code which isn't Apple Approved requires telling the OS that you know what you're doing, twice.

Running signed code which has been altered, such as a hacked XCode, isn't possible, as far as I know.

If this was the reason developer accounts were required, it no longer is. From Apple's perspective, there's only upside in requiring them, which is the most likely explanation for why they do.

[ Parent | on HN ]
Re:Apple introduces Ask Apple for developers by ajkjk on Tuesday October 11, 2022 @03:12PM (#33167830)
Not developer tools that are downloaded from apple.com.
[ Parent | on HN ]
Re:Apple introduces Ask Apple for developers by MichaelCollins on Tuesday October 11, 2022 @04:46PM (#33169027)
How does that have anything to do with requiring users to have an account to download software signed by Apple from Apple's servers? That doesn't make a lick of sense to me.
[ Parent | on HN ]