News for hackers. Stuff that matters.

A comment on iOS 17 will reportedly set the stage for sideloading apps on iPhone. Parent comment

Re:iOS 17 will reportedly set the stage for sideloading apps... by judge2020 on Monday April 17, 2023 @12:54PM (#35603411)
They don't speak of the security model. But the compliance model, ie. "you can't block the entire app until the user enables precise 'always' location tracking".

But in terms of security, every jailbreak since ~iOS 8 besides checkm8 has been via a third-party app breaking out of the sandbox. The ramifications for shipping an exploit chain like this via the built-in app store is going to be extreme (possibly being blacklisted from iOS), but a sideloaded app can run such an exploit chain in the background (to install spyware if the user isn't on the most up-to-date version of iOS) with no consequence.

[ Parent | on HN ]
Re:iOS 17 will reportedly set the stage for sideloading apps... by waboremo on Monday April 17, 2023 @01:10PM (#35603618)
This is false and not how it works on macOS, worse I would consider this fearmongering.
[ Parent | on HN ]
Re:iOS 17 will reportedly set the stage for sideloading apps... by judge2020 on Monday April 17, 2023 @01:23PM (#35603734)
What is false?

Facebook could pull Instagram and tell users to visit Instagram.com.

They can now block some/all of the app based on whether or not you've enabled location tracking.

And malware on macOS works different because macOS doesn't have the same security model as iOS. macOS apps can access large parts of the system after one or two security prompts, and Apple has gone on record that this is not the security level they want for iOS[0].

I guess you could mean that Apple would do notarization, but I can assure you that enough third parties would still fight Apple in court/via lobbying to remove all of Apple's oversight over app approval.

0: https://www.cultofmac.com/742918/craig-federighi-apple-softw...

[ Parent | on HN ]