Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I still don't see why you would want Apple to have a say in what you run on your device, but you do you, I guess.




They don’t. You can still run any software you’d like. You just get warnings, so people like parents don’t just randomly open malicious programs from the internet.

Which is exactly as it should be


Tell me how I can side load apps on iphone? Even with warnings and stuff.

If you compile it from source yourself using Xcode you can deploy to your own device without an Apple developer subscription.

It unfortunately goes away. Last I checked you get 7 days before the app expires. The subscription makes it last much longer, but not forever.

I want to install YouPorn app. They are not going to hand me their source code.

Because they have thousands of employees who have the time to look at the source code and determine whether it is malicious.

Nobody else would bother. That’s why meme language repositories continuously lead to hacks and vulnerabilities.


Apple absolutely does not manually read all the source code they notarized.

They don't notarize source code at all. They notarize compiled app binaries. Many or even most App Store apps are closed source.

You are mixing up with Fdroid, Apple doesn't do any source code reading and the tests they do are very basic.

Right now you have a lot of piracy apps which are disguised as a "note taking app" and they passed the appstore review without any issues.


Do you have any examples? Asking for a friend.

Apple employees have access to the source code of apps on the App Store?

Technically yes, if they want it you have to give it to them. The dev agreement and TOS is pretty broad.

Is that (Apple asking for source) a frequent thing?

We don't know.

App developers do know. I can't say that I've ever worked on an app where this request has been made. Neither the App Store Connect Agreement[0] nor the Apple Developer Agreement[1] stipulates that the developer can be compelled to surrender their source code.

[0] https://appstoreconnect.apple.com/WebObjects/iTunesConnect.w... [1] https://developer.apple.com/support/downloads/terms/apple-de...

All the relevant agreements can be found here, so if there's something that specifies this kind of overreach, I'd both be very surprised and interested.

https://developer.apple.com/support/terms/


“If you are required by law, regulation, or court order to disclose any Apple Confidential Information (which can include requests related to legal investigations or audits), you agree to give Apple prompt notice and to cooperate in seeking a protective order or confidential treatment of such information”

What part of this says Apple can compel developers to share their apps' source with Apple?

Edit: oh, are you saying that such requests would be "Apple confidential information" so nobody would say if it happened?


They haven't read the document properly. Here's the definition:

> any information disclosed by Apple to you in connection with Apple Events will be considered and referred to as “Apple Confidential Information” and are subject to the confidentiality obligations of this Agreement

The definition of Apple Events:

> As an Apple Developer, you may have the opportunity to attend certain Apple developer conferences, technical talks, and other events (including online or electronic broadcasts of such events) (“Apple Events”).


We do know. It has never happened.

This has literally never happened.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: