41–50 of 89 posts
The internet in China is so bad developers at Tencent download Xcode from random links on Chinese Dropbox? Pathetic.
It's bad when crossing the border. Rumor says it's due to traffic analysis by the GFW. I cannot find any source to prove or disprove that though.
> If you are an iOS developer, however, a lot can be done to secure your development system:... Separate your development system with your everyday system. Development systems should be used solely for development and not for browsing random sites. If physical separation presents too much of a problem for developers, at the very least, a dedicated user account for development should be used. I'm not an application de…
But usually implemented not as a physically separate network, but an extremely locked-down one. No USB activated ports (data, mice are OK), instant reporting of unexpected devices, white-listed website access (if lucky) and often no email privileges to email out of the organization. This gets relaxed (apart from USB access) with seniority. I know companies where mobile phones have to be left in lockers on entering/leaving the building, and paper free environments meaning no one unless a bit senior has printing rights.
Does this make a difference? Against a malignant party, no. Against careless staff member, yes. Against a lucky/fluky outside actor (in the story link), yes.
Earlier quoted context omitted.
It's bad when crossing the border. Rumor says it's due to traffic analysis by the GFW. I cannot find any source to prove or disprove that though.
The internet being bad is done on purpose. They don't have to make it shit with the traffic analysis, since internal traffic has traffic analysis too. They do it to keep china's internet an internal, more easily controllable intranet.
Update: it may be able to steal iCloud passwords: http://researchcenter.paloaltonetworks.com/2015/09/update-xc...
Downloading apps from App Store is very slow in China and sometimes you can't even open App Store successfully. It's not Apple's fault (but Apple should do something to solve it). The real cause is the gov and GFW. Many developers use XunLei(Thunder, a p2p downloading tool) to accelerate downloading. I used it too when I was in Shanghai China. After I moved to Hong Kong, I always download directly from App Store and…
What can Apple reliably do without exposing the source code and attribution (with signig) of every file used to generate the app, run inside a signed environment on a locked down computer? Please. This is the GFW.
The internet in China is so bad developers at Tencent download Xcode from random links on Chinese Dropbox? Pathetic.
And dont run a checksum.
Checksums are useless if you don't have access to an alternative source.
Earlier quoted context omitted.
And dont run a checksum.
A checksum can only tell you if the file is identical to another. Even if it did - you downloaded the file from untrusted location for a reason - you don't have access to original source. Checksums are useless if you don't have access to an alternative source.
Not true, they have access to original XCode (and checksum), but the download speed is very slow.
I find it interesting that the source code on GitHub was committed by 2 different users with the same user name XcodeGhostSource, one for the code and one for the README.md. Are these two separate persons? Or maybe the one for the code was committed before using the same email to register GitHub account? https://github.com/XcodeGhostSource/XcodeGhost/commits/maste...
https://github.com/XcodeGhostSource/XcodeGhost/commit/e5b527...
https://github.com/XcodeGhostSource/XcodeGhost/commit/014f78...
Apps like Mercury, WinZip, PDFReader are reported to be affected by this Xcode trojan (have been taken down by Apple).
http://researchcenter.paloaltonetworks.com/2015/09/malware-x...