@glynor

25 Followers
237 Following
188 Posts
Having fun in the snow!

@jsnell @imyke The idea being that if a bad actor managed to compromise BOTH the developer private keys AND Apple’s private keys, they still couldn’t “mass-infect” the world’s iOS devices with bad versions of apps.

They’d still have to do it one by one for each individual device.

Oh, and for the watch high speed water sports. Speed makes pressure. Going fast in water is equivalent to going deeper.

@jsnell @imyke I tried to find a link explaining this in detail, but I think I'd have to dig into their security whitepapers, and I don't have the time now. But, that is my understanding from reading through these in the past.

Each time you download an app from the App Store on an iOS device, that download is created on-the-fly and signed by Apple just for YOUR DEVICE and no other device can use the download, even though the underlying “bits" within the app are the same.

@jsnell @imyke This is a security feature. It prevents man-in-the-middle attacks where an app is modified maliciously by a bad actor on the network between you and the App Store, or after download on your device's storage.

It is very similar to how macOS is cryptographically locked to your particular Mac, except that it happens for every single app on your iOS device, and not just the OS. This has been true for years (perhaps since the original App Store, though I'm not positive on that).

@jsnell @imyke Follow-up from the most recent Upgrade, which you've probably gotten 1000 times already now, but I was doing that thing where you talk-back to a podcast…

On transferring apps from one device to another: You got real-time follow up that said it but you misunderstood the comment. It IS NOT that the apps are special to your model of phone. Each app is cryptographically signed for YOUR SPECIFIC DEVICE.

You can't transfer apps even between identical models.

AnandTech Closing Down

Ryan Smith, with some very sad news: It is with great sadness that I find myself penning the hardest news post I’ve ever needed to write here at AnandTech. After over 27 years of covering the wide – and wild – word of computing hardware, today is AnandTech’s final day of publication. For better or [...]

512 Pixels
Kid1: “what are you working on?”
Me: “reviewing network security for our new facility. There’s a request to connect the anti-stink sprayers in the bathroom to the internet and control them with an app.”
Kid1:”that’s really a thing?”
Me:”apparently.”
Kid1 (shaking his head and making a scrunchy face): “how did we get here?”
Me: “how did we get here as a society? Or how did my career get to ‘review internet toilet bomb tech’?
#InfoSec
#InformationSecurity

Do you have a book that you are currently reading? (To qualify, it has to be a book - physical, e-book or audiobook - that you have read within the past 3 days.)

Give this a boost, if you don't mind. It'd be nice to have lots of respondents.

Yes
83.5%
No
16.5%
Poll ended at .

Though I do suspect that if Robert Isom (or someone like him) had somehow been on that plane with us rabble, they would have found another plane from somewhere (in the 12+ hours they had when they knew it was a problem) to come and collect their paying customers in Costa Rica and get them to their destinations.

And if not, I bet it would cost them a lot more than a $25 voucher. (fin)

45/

Except I probably will have to fly them again. Because I live in Maine, and there aren't choices. And even if I do manage to choose another airline, they're all pretty much in the same ballpark of terrible. And it seems to be getting worse. Maybe we just need real consumer protections in the US, or something? Maybe this post will do something?

Unfortunately, probably not.

44/

That wouldn't even cover the terrible midnight McDonalds bill! And that assumes we'd ever fly #americanairlines again, which, I mean, they have to think we probably won't with that kind of kiss off. So, they're not even going to be out the $25 on a free checked bag or whatever.

43/