Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Python grapples with Apple App Store rejections

lwn.net

Post reply on HN
Print view View original

111–118 of 118 posts

Re: Python grapples with Apple App Store rejections

#111

Post by Ukv »

dwaite wrote: post #106
Ukv wrote: post #92

Earlier quoted context omitted.

My baseline would be similar to that which you get from modern compilers and automated tests. Something like: Lib/urllib/parse.py contains disallowed string "itms-services" at line 62 column 25 Reason: Apps may not install or launch executable code, such as through the itms-services URI schema. To get credit for "giving you a clear direction", I'd want them to make available and suggest a fix. In general that could b…

Such a check would be possible if: 1. Apple received a copy of your source code to do source analysis 2. Apple actually supported running python code as an option for writing iOS apps and wrote source code analysis tools for python for reporting compliance issues neither of these are true.

I'm not suggesting any language-specific features like telling you which function it's in - just the filename, position, and matched string. This is information already available to Apple, and can be useful even for compiled/object code.

From the linked Github issue:

> After lots of 'we can provide you with no further information' I finally submitted an appeal for the rejection which at last resulted in Apple telling me that parse.py and its .pyc were the offending files

Re: Python grapples with Apple App Store rejections

#112

Post by denkmoon »

mirsadm wrote: post #74
denkmoon wrote: post #69

Earlier quoted context omitted.

Why do you act like Android doesn't exist? You _can_ opt out of "digital serfdom".

How is Android any different?

Android is open source, there are several freedom respecting distributions of it. You can even get mostly freedom respecting hardware.

Re: Python grapples with Apple App Store rejections

#113

Post by brinox »

01HNNWZ0MV43FF wrote: post #99
water-your-self wrote: post #96

Earlier quoted context omitted.

This is not relevant to the topic.

No, it is. Running unsigned exes with no sandbox actually is risky, and game jams are a specific case where it comes up.

Running signed binaries neither is as long as the corresponding keys leak all the time [1].

Anyone can just get their malware signed by just throwing some dollars at it.

[1] https://bugs.chromium.org/p/apvi/issues/detail?id=100

Re: Python grapples with Apple App Store rejections

#114

Post by heavyset_go »

modeless wrote: post #61
heavyset_go wrote: post #10

It's not just Apple that pulls shenanigans like this. Try building a Python app with PyInstaller while you have Windows Defender live scanning on, which is the default setting. You won't even be able to compile a binary without Defender preventing you from doing so. Similarly, try running the binary produced by PyInstaller with Windows Defender on. Defender will say it's malicious and won't run it. It's a bit dystopi…

I built PyInstaller binaries on Windows a few months ago and had no trouble with Windows Defender at all.

This was my experience as of two weeks ago using a pyenv-compiled Python 3.12.4 and the latest PyInstaller on a fresh install of Windows 11.

If you used the Microsoft-signed or Python Software Foundation-signed Python binaries, maybe it doesn't trip the Defender alarm, same thing if you used older versions of Python or PyInstaller. 3.12.4 only came out on the 6th.

Re: Python grapples with Apple App Store rejections

#115

Post by happymellon »

justinclift wrote: post #62
yashg wrote: post #55

Earlier quoted context omitted.

The code signing certificates that MS requires are ridiculously expensive. It's a cartel of certificate isseuers. It's a downright robbery. We need something similar to Let's Encrypt for code signing.

SignPath gives free certs to OSS projects: https://signpath.org/about/ We (sqlitebrowser.org) have recently started using them for signing our Windows builds.

If it's limited to OSS projects then it's not like LetsEncrypt

Re: Python grapples with Apple App Store rejections

#116

Post by justinclift »

happymellon wrote: post #115
justinclift wrote: post #62

Earlier quoted context omitted.

SignPath gives free certs to OSS projects: https://signpath.org/about/ We (sqlitebrowser.org) have recently started using them for signing our Windows builds.

If it's limited to OSS projects then it's not like LetsEncrypt

Fair point. For OSS projects it's better than the alternatives though. ;)

Re: Python grapples with Apple App Store rejections

#117

Post by lomase »

Nab443 wrote: post #97
lomase wrote: post #81

Earlier quoted context omitted.

It is sad when even here people dont care about the right to run whatever code you want in the hardware you own.

You're mistaken, you don't actually own it.

You are mistaken.

I bougth it, is not a lease, is not a license to use it, I own the device. I should be able to run whatever I want on it.

Stop spreading missinformation, you are thinking about software.

Re: Python grapples with Apple App Store rejections

#118

Post by hulitu »

heavyset_go wrote: post #10

It's not just Apple that pulls shenanigans like this. Try building a Python app with PyInstaller while you have Windows Defender live scanning on, which is the default setting. You won't even be able to compile a binary without Defender preventing you from doing so. Similarly, try running the binary produced by PyInstaller with Windows Defender on. Defender will say it's malicious and won't run it. It's a bit dystopi…

MS Defender _is_ malware. Avoid at all costs. /s
Post reply on HN