Comment

Comment by judge2020

Depending on how it's installed (the two ends of the spectrum being either downloading other app stores via Apple's App Store or downloading them from safari) it can cause issues with how Apple's standard of "no malware" stays even when downloading apps via those app stores.

For an example, with alternative app stores it's very likely you could release a jailbreak and have it installable without a computer since most (non-checkm8) jailbreaks break out of the sandbox and exploit their way to root access and installing an dpkg frontend. That's all well and good until someone does the same but hides jailbreak code in an inconspicuous app that initiates the jailbreak in the background, and instead of installing dpkg it installs a keylogger/keychain dumper that sends all passwords to a remote server.

Either Apple will still need to review these, have IPAs notarized, or have contracts in place with each app store developer to ensure the same app review quality. I don't see epic accepting any of these scenarios without a fight.

parent judge2020 6 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton