Interesting that a few of the apps were also (voluntarily?) pulled from the developer’s website, so we can’t inspect them.
Apple revoked longtime Mac developer's code signing certificate with no warning
91–100 of 180 posts
Re: Apple revoked longtime Mac developer's code signing certificate with no warning
#92Earlier quoted context omitted.
Surely by moving the goalposts you can make everything look like a monopoly. In the end both mobile platforms have practically the same popular apps.
> Surely by moving the goalposts you can make everything look like a monopoly. Walmart doesn't have a monopoly on SAE 5w30 motor oil. You can't make it look like a monopoly when it isn't one, because when it isn't you can identify competitors who sell substitute products to the same customers. > In the end both mobile platforms have practically the same popular apps. The market they have a monopoly on is iOS app stor…
Walmart has a monopoly on being the only people who can sell products in a Walmart store.
Re: Apple revoked longtime Mac developer's code signing certificate with no warning
#93Earlier quoted context omitted.
This will lead to computing being locked down further with really questionable benefits. In fact open source software can suffer greatly because these certs make deployment cost non-zero. So someone providing binaries of such software has to pay for it to large corps like Apple and Microsoft.
We've been in this situation for 10 years now. Has the slippery slope caused any sliding yet? The cost issue is separate from the revocation issue, and my point was about certain revocation--it's an absolutely great feature for any code signing situation where you are trusting others to compile code for you and others can't confirm that a certain set of binaries came from a certain set of source files. (Reproducible…
> Has the slippery slope caused any sliding yet?
Yes it has, that’s the point of this whole discussion. Desktop apps now need to be signed and I’d be willing to bet you couldn’t find a signed torrent client.
Re: Apple revoked longtime Mac developer's code signing certificate with no warning
#94Apple also has the ability to remotely login to EVERYONE's Internet-connected Mac computers and monkey around (removing software etc.). Of course, they only use this when THEY feel it's really necessary. Does not matter if you subscribe to any of their paid services, does not matter if you bought a used MacMini for 50 dollars or paid 50,000 dollars for a MacPro7. Some would say "great, wish we could do it to real vir…
You are overstating the case pretty wildly. They have the ability to cause the OS to automatically delete binaries based on checksum, not "remotely login". And every time they have used this awesome power, it has been for good and everybody here would be OK with it. They have never used this power to like fuck with some developer because he violated YouTube TOS, or used the Taiwanese flag in his app, etc. As a user,…
> As a user, I want my OS vendor to have this power and use it appropriately.
As a user I want my OS vendor to have this power with my explicit permission and use it appropriately. I also want to be able to disable this completely if I choose.
There's going to come a time where Apple is going to do something shitty with this ability. Giving up the freedom to run whatever code you want on your computer is dangerous long-term.
Re: Apple revoked longtime Mac developer's code signing certificate with no warning
#95Earlier quoted context omitted.
WTF. I dare any one of you who downvoted this to explain why in public.
Because it is a lot of hand-waving bullshit. This "walled garden" talk gets tiring fast. And, uh oh, big surprise, you have to actually behave according to ToS you signed. How can it be, hmmm? Nobody forces you to sign anything. Go have your own platform and distribution chanells. Oh, you want to be where the money is? Well, than. Maaaaybe there is some correlation between being the walled garden and the place there…
That doesn't invalidate the point, it reinforces it: when you sign up for an Apple-style "walled garden" you cede all control of whether or not your app ships — and, assuming you do ship, whether or not your users can keep using your app.
You being tired of it doesn't change anything. ¯\_(ツ)_/¯
Re: Apple revoked longtime Mac developer's code signing certificate with no warning
#96Earlier quoted context omitted.
> Now we can skip the part where somebody says that you > can't have a monopoly on your own product No, we actually cannot skipt that part. Or maybe we can skip the part where you are human and not a camel and then discuss how many days can you spend in a desert without water?
We can skip (could have skipped?) that part because I already posted the rebuttal: > monopolies always look like that because their product is the only one in the market, and the reason that android app stores and iOS app stores are different markets is that you can't install Android apps on iOS devices or vice versa.
Sorry, this is not the rebuttal. You may want to have your own meanings for words, that's fine (I guess), but do not expect others to agree to them.
Re: Apple revoked longtime Mac developer's code signing certificate with no warning
#97Earlier quoted context omitted.
Except that it's been verified by many people, and you can verify on your own Mac, that the developer's certificate has indeed been revoked, and the apps don't work. That part of the story is indisputable.
Sure but the important part of the tweet is “with no warning”. That’s why it is being posted here.
Apple sends out emails about a month before your certificate expires - I bet they didn’t check it and/or thought the expiry would only apply to new builds
*replaced pronouns and specified
Re: Apple revoked longtime Mac developer's code signing certificate with no warning
#98Earlier quoted context omitted.
Because it is a lot of hand-waving bullshit. This "walled garden" talk gets tiring fast. And, uh oh, big surprise, you have to actually behave according to ToS you signed. How can it be, hmmm? Nobody forces you to sign anything. Go have your own platform and distribution chanells. Oh, you want to be where the money is? Well, than. Maaaaybe there is some correlation between being the walled garden and the place there…
That doesn't invalidate the point, it reinforces it: when you sign up for an Apple-style "walled garden" you cede all control of whether or not your app ships — and, assuming you do ship, whether or not your users can keep using your app. You being tired of it doesn't change anything. ¯\_(ツ)_/¯
Ah, the illusion of control…
Re: Apple revoked longtime Mac developer's code signing certificate with no warning
#99Earlier quoted context omitted.
You are overstating the case pretty wildly. They have the ability to cause the OS to automatically delete binaries based on checksum, not "remotely login". And every time they have used this awesome power, it has been for good and everybody here would be OK with it. They have never used this power to like fuck with some developer because he violated YouTube TOS, or used the Taiwanese flag in his app, etc. As a user,…
> As a user, I want my OS vendor to have this power and use it appropriately. As a user I want my OS vendor to have this power with my explicit permission and use it appropriately. I also want to be able to disable this completely if I choose. There's going to come a time where Apple is going to do something shitty with this ability. Giving up the freedom to run whatever code you want on your computer is dangerous lo…
Yep, I do share your concern. They so far haven't done anything shitty with this capability (unlike the one the main thread pertains to, which they have done over and over).
There absolutely should be a mechanism to disable the feature, although I think it should be enabled by default.
Re: Apple revoked longtime Mac developer's code signing certificate with no warning
#100Earlier quoted context omitted.
It has an app for downloading videos off YouTube and other video sites. Not sure how much influence media companies have in the UK but maybe that's why? I know YouTube downloading services have struggled in the past to stay operational.
I don't think so. There are many "YouTube downloader" type apps, and none of the others are blocked as far as I can tell.
I guess I'm too used to Android where you need to install a 3rd party APK.