Ansil849

Joined 6 years ago

Karma
3,653
Submissions
948
Member since
Jan 18
Sorry, you can't comment here.
View on Hacker News

Recent submissions

Comment · 3 years ago
Comment · 4 years ago
Comment · 4 years ago
> I'm in the US

That's great. The block is in the EU. Which is in...the West.

Comment · 4 years ago
Comment · 4 years ago
Comment · 4 years ago
> The great firewall of China prevents most of their citizens from seeing news that isn’t the party line

Totally not like how access to Russian news outlets has been blocked by parts of the West.

Comment · 4 years ago
You should not. But if it makes you feel any better, Americans do the same thing by allowing Chinese tech like Zoom and TikTok operate in their country.
Comment · 4 years ago
Lockdown is literally presented by Apple as being for people targeted by APTs like those developed by NSO Group, therefore I expect it to prevent attack vectors used by these APTs, like exploitation of the Developer program to facilitate sideloading malicious apps. I don't feel like this is an unrealistic expectation, and not having the mode actually do that amounts to security theater, which is a far cry from decrying everything as such.
Comment · 4 years ago
> "What constitutes an enterprise that should be allowed to have 'enterprise apps'"

Apple has a list of requirements - https://developer.apple.com/programs/enterprise/ - for example, a company needs to have at least 100 employees. The issue, however, seems to be how stringently these requirements are enforced, or whether they are at all. In the case of Hermit, the Italian spyware company seems to have created a fake company and tricked Apple into granting the fake company access to the developer program. Now, the interesting question for me is whether the fake company actually managed to pass all of the requirements, like giving Apple a list of 100 fake employees, and whether Apple actually performed their due dilligence and checked whether the employee list was real, or whether they accepted it at face value, or didn't even require it.

In other words, I think a key takeaway from the latest incident is Apple needs to take accountability and harden their Enterprise program entry requirements, and I haven't seen anything about that being the case.

Comment · 4 years ago
> Running an enterprise app still is not a trivial single tap on iOS.

Yes, but still successful, as Hermit demonstrated. So my question is whether Lockdown mode would have prevented APTs like Hermit which it claims to prevent against. If not, then the move is security theater which doesn't address the actual flaws (like poor vetting into the Enterprise Program) being successfully leveraged in the wild.

Comment · 4 years ago
> High-level targets (for whom this mode is specifically advertised) are likely aware of the dangers of installing apps.

I firstly don't believe this is true at all, plenty of high-level targets are not tech savvy; but more to the point of Lockdown mode, you could then say the same thing about most of its other features ("High-level targets are likely to already be aware of the dangers of doing $thing_Lockdown_prevents").

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton