Live data from Hacker News

Apple revoked longtime Mac developer's code signing certificate with no warning

twitter.com

21–30 of 180 posts

Re: Apple revoked longtime Mac developer's code signing certificate with no warning

#21
post #18

Perhaps we should wait to get the whole story to discuss. Didn't we just go through this with the "Apple doesn't return 30% on refund" fiasco last week?

Isn't silently revoking a longtime mac developer's certificate bad practice, regardless of the justification?

Isn't keeping the 30% on refunded apps bad practice, regardless of the justification?

Well, yes, if it's true, which it wasn't.

Re: Apple revoked longtime Mac developer's code signing certificate with no warning

#22
post #3

I suspect this is why: > Ever wished you could save a video from the Internet? Search no more, Downie is what you're looking for. Easily download videos from thousands of different sites.

"downie"? could it just be the name? https://www.urbandictionary.com/define.php?term=Downie though if it was that you'd think they would just pull the app and ask him to rename it...

Looking at his website I don't think it is even in the store. What he names it is really none of Apple's business unless it infringed on one of their trademarks.

Re: Apple revoked longtime Mac developer's code signing certificate with no warning

#23

Sadly, this is what a walled garden results in. Please don't be surprised, shocked or even remotely discontent because by signing the ToS you have waived away any and all of your rights regarding the use and publishing of software in this walled garden. The only reason an issue like this will get "fixed" is when this (post/tweet) goes viral and the PR department will work extra hard to correct this.

Don't know why you are downvoted since you are completely correct. It is unfair to the developer but we wouldn't even have this discussion if people rejected app stores. I like that more developers just reject software certification processes. There is zero benefit aside from lock in.

Other than open season on the users with malware out the wazoo. But who cares about security. Do you buy healthcare from the back of a pickup truck?

Re: Apple revoked longtime Mac developer's code signing certificate with no warning

#24
post #18

Earlier quoted context omitted.

Isn't silently revoking a longtime mac developer's certificate bad practice, regardless of the justification?

Isn't keeping the 30% on refunded apps bad practice, regardless of the justification? Well, yes, if it's true, which it wasn't.

Okay, so what are the situations where it can be false?

* apple actually did communicate to them, but it was via carrier pigeon or something and it got lost

* apple is under gag order

* the developer is actually a long time repeat offender and is trying to evade via sockpuppet accounts

None of them seem plausible to me. Also, unlike with the apple 30% refund fiasco, we know for sure this is happening, because other users are tweeting that they're receiving error messages when trying to install his software.

Re: Apple revoked longtime Mac developer's code signing certificate with no warning

#25

Earlier quoted context omitted.

"downie"? could it just be the name? https://www.urbandictionary.com/define.php?term=Downie though if it was that you'd think they would just pull the app and ask him to rename it...

Looking at his website I don't think it is even in the store. What he names it is really none of Apple's business unless it infringed on one of their trademarks.

I don’t disagree but we both know that’s not how Apple operates the app store. I can think of a ton of words I would absolutely expect Apple to deny as an app name.

Re: Apple revoked longtime Mac developer's code signing certificate with no warning

#26

Sadly, this is what a walled garden results in. Please don't be surprised, shocked or even remotely discontent because by signing the ToS you have waived away any and all of your rights regarding the use and publishing of software in this walled garden. The only reason an issue like this will get "fixed" is when this (post/tweet) goes viral and the PR department will work extra hard to correct this.

Don't know why you are downvoted since you are completely correct. It is unfair to the developer but we wouldn't even have this discussion if people rejected app stores. I like that more developers just reject software certification processes. There is zero benefit aside from lock in.

As a developer it’s a pain but as a user it’s definitely useful for security purposes. It’s hardly “zero benefit”.

Re: Apple revoked longtime Mac developer's code signing certificate with no warning

#27
post #24

Earlier quoted context omitted.

Isn't keeping the 30% on refunded apps bad practice, regardless of the justification? Well, yes, if it's true, which it wasn't.

Okay, so what are the situations where it can be false? * apple actually did communicate to them, but it was via carrier pigeon or something and it got lost * apple is under gag order * the developer is actually a long time repeat offender and is trying to evade via sockpuppet accounts None of them seem plausible to me. Also, unlike with the apple 30% refund fiasco, we know for sure this is happening, because other u…

How does other users receiving errors prove that the developer received no warning? Your first bullet point seems entirely plausible, albeit the failure mode is likely less avian.

Re: Apple revoked longtime Mac developer's code signing certificate with no warning

#28
post #4

Earlier quoted context omitted.

Is there something wrong with downloading videos to my computer?

Personally I would say no but it does kind of depend. Tools like this do allow you to save copies of videos that weren't meant to be savable. The dev's website includes a screenshot of it downloading a bunch of Disney material. That is not a wasp nest I want to shake.

Broadcast and cable TV wasn't meant to be savable, and then VCRs came out and courts decided that saving (time shifting) is absolutely fine. It doesn't in and of itself facilitate sharing.

If it breaks actual encryption (a la DeCSS) then yes, it oversteps.

But TV content stakeholders don't have much pull with convincing VCR manufacturers/distributors to stop supplying VCRs. Apple does clearly have the ability to affect the signing of software.

Re: Apple revoked longtime Mac developer's code signing certificate with no warning

#29
post #4

Earlier quoted context omitted.

Is there something wrong with downloading videos to my computer?

Personally I would say no but it does kind of depend. Tools like this do allow you to save copies of videos that weren't meant to be savable. The dev's website includes a screenshot of it downloading a bunch of Disney material. That is not a wasp nest I want to shake.

> Tools like this do allow you to save copies of videos that weren't meant to be savable

It's actually computers that allow you to do this. I think this is why there's a war (of sorts) against general purpose computers: they enable you, the user, to do all sorts of things publishers didn't envision or want.

Re: Apple revoked longtime Mac developer's code signing certificate with no warning

#30
post #24

Earlier quoted context omitted.

Isn't keeping the 30% on refunded apps bad practice, regardless of the justification? Well, yes, if it's true, which it wasn't.

Okay, so what are the situations where it can be false? * apple actually did communicate to them, but it was via carrier pigeon or something and it got lost * apple is under gag order * the developer is actually a long time repeat offender and is trying to evade via sockpuppet accounts None of them seem plausible to me. Also, unlike with the apple 30% refund fiasco, we know for sure this is happening, because other u…

It doesn't take much imagination to come up with other scenarios. No idea if any of these are true.

* apple actually did communicate to them, but it went to the developer's spam box.

* apple actually did communicate to them, but sent it to an old email address that the developer never updated.

* apple actually did communicate to them, but it was via a developer dashboard that the developer rarely checks.

* apple didn't revoke it. something else is going on.

Post reply on HN