Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The problem with an unofficial side load like this is that it can get around some of the built in protections of iOs that I actually like. It opens up attack vectors that Apple hasn't considered yet.

I feel like with official side loading, Apple would be inclined to lock down what apps can do without explicit permission, or better yet, require more explicit permissions when an app is side loaded. Like make every API call require permission the first time it's called.

I'm fine with it being difficult to side load, but I really want it to be official so that Apple at least considers those attack vectors (like they've been doing on MacOS).



You don't have to use this app. If you don't want to open up these so-called attack vectors you can simply not use it.


I think you missed the point. The point is that because this app exists, it allows Apple to ignore these possible attacks instead of having to confront them, like they would if there were an official side loading channel.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: