This sounds like a bug with the App Store app than a new update actually being installed.
Some iPhone Apps Receive Mysterious Update 'From Apple'
11–20 of 35 posts
Re: Some iPhone Apps Receive Mysterious Update 'From Apple'
#12hmm, my money is on some actively used 0-day exploit that Apple is sealing shut before the CVE gets announced.
By the looks of the app list, they seem to be apps and games that used to be popular and have fallen in disrepair and apps that are starved of maintenance attention.
On the one hand it could be an exceptionally good example of "stewardship"; on the other hand, if this is true, what if authorities could later compel Apple to manipulate applications in some malign manner?
Re: Some iPhone Apps Receive Mysterious Update 'From Apple'
#13Has anyone ever done a proper security audit of VLC that is downloaded from the web? I don't trust it, and the fact that their releases on Github don't include binaries makes me trust it even less. Nobody is compiling VLC from source, and they don't provide any sort of provenance from the GH actions pipeline.
Re: Some iPhone Apps Receive Mysterious Update 'From Apple'
#14Has anyone ever done a proper security audit of VLC that is downloaded from the web? I don't trust it, and the fact that their releases on Github don't include binaries makes me trust it even less. Nobody is compiling VLC from source, and they don't provide any sort of provenance from the GH actions pipeline.
This seems utterly pointless to worry about. You're fucked either way if you trust VLC.
Re: Some iPhone Apps Receive Mysterious Update 'From Apple'
#15Has anyone ever done a proper security audit of VLC that is downloaded from the web? I don't trust it, and the fact that their releases on Github don't include binaries makes me trust it even less. Nobody is compiling VLC from source, and they don't provide any sort of provenance from the GH actions pipeline.
This seems utterly pointless to worry about. You're fucked either way if you trust VLC.
Care to elaborate?
Re: Some iPhone Apps Receive Mysterious Update 'From Apple'
#16Has anyone ever done a proper security audit of VLC that is downloaded from the web? I don't trust it, and the fact that their releases on Github don't include binaries makes me trust it even less. Nobody is compiling VLC from source, and they don't provide any sort of provenance from the GH actions pipeline.
All linux distros build VLC from source
Re: Some iPhone Apps Receive Mysterious Update 'From Apple'
#17The FairPlay certificate rotation theory makes the most sense. Apple has done silent re-signing before when DRM certificates expired. What's unusual here is the update note surfacing in the App Store UI at all — that's probably an unintended side effect of whatever pipeline they're running this through, not intentional transparency.
Re: Some iPhone Apps Receive Mysterious Update 'From Apple'
#18Vast majority of change logs are along the lines of “implements to make things better”
that's proprietary software for you
Re: Some iPhone Apps Receive Mysterious Update 'From Apple'
#19hmm, my money is on some actively used 0-day exploit that Apple is sealing shut before the CVE gets announced. By the looks of the app list, they seem to be apps and games that used to be popular and have fallen in disrepair and apps that are starved of maintenance attention. On the one hand it could be an exceptionally good example of "stewardship"; on the other hand, if this is true, what if authorities could later…
If you are worried about apple being compelled to do something, then they can do that at the OS level rather than something obvious in the
I think this is simply updating some api call which no longer works properly, coupled with the terrible "changelogs" that are the norm on the app store. Someone down thread mentioned certificate rollover.
A sensible changelog would be "update expired certificate", or "fix integration with ios 26.2", or "patch security issue"
An actual changelog would be "we're bringing you ever more great new improvements"
Here's the latest Audible one:
> At Audible, we're always making updates and improvements to make your listening experience better.
> If you're experiencing issues, please reach out to customer services. For feedback or suggestions contact us at audible.co.uk/help
This is the same every time, because these changelogs are meaningless.
Re: Some iPhone Apps Receive Mysterious Update 'From Apple'
#20Neither developers nor consumers should be comfortable with this, as this breaks the trust model and is extremely worrying. The site is of course downplaying it given its name, which is a huge shame.
What trust model? Is there anyway to verify that an app from the app store is the same as the one the developer uploaded?