Apple Developer Program Co-opted to Install Pirated iPhone Apps
Apple has traditionally kept is smartphones locked down to prevent unauthorized app installs, but there is a program that helps companies test and distribute non-public apps. It appears that some clever and unscrupulous folks on the internet have co-opted that technology to provide hacked and pirated apps. Apple, understandably, is not pleased.
When using an iOS device, you can usually only download apps from the App Store. Some users resort to complicated and dangerous hacks to “jailbreak” phones to unlock more capabilities, but that’s harder than it used to be. Shady app marketplaces like TutuApp, Panda Helper, AppValley, and TweakBox make use of Apple’s enterprise developer certificates to get around that.
If that sounds familiar, it’s because Apple’s certificate program was in the spotlight recently thanks to Facebook and Google. Both companies were found to be using enterprise developer certificates to install powerful traffic analysis apps on the phones of volunteer customers. This was a violation of Apple’s policies, so both companies had to end the practice. That prompted Reuters to look for other evidence of misuse, which it found in the above app repositories.
All the above app providers advertise the availability of paid apps and games for free, as well as hacked/modded content. iDevice users are invited to install the store’s certificate, which allows the client to push apps outside the App Store. A stolen version of Minecraft or Facetune would never pass muster in the App Store, but TweakBox or Panda Helper can do whatever they want in their own little ecosystem. The stores also offer free-to-play and ad-supported content with mods that strip out the monetization.
Many of these underground app marketplaces have their own ads to make money, and a few offer paid subscriptions with access to exclusive hacked content and other perks. All of them are siphoning off money from Apple and independent developers, though.
Apple can’t control what developers do with the enterprise certificates, but it can revoke them. That’s what it did (briefly) with Facebook and Google when they were caught misusing the program. When reached for comment, Apple said it’s ready to take immediate action. Canceling a certificate immediately suspends all apps installed via that certificate. At least one of the app provides cited in the Reuters report has already gone offline.
Even if you don’t care about the ethical angle, giving any of these services access to your device is a bad idea from a security standpoint. There’s no telling what’s lurking in these hacked apps.
Continue reading
AMD Buys FPGA developer Xilinx in $35 Billion Deal
The deal, which we discussed earlier this month, will give AMD access to new markets that it hasn't previously played in, including FPGAs and artificial intelligence.
VIA Technologies, Zhaoxin Strengthen x86 CPU Development Ties
VIA and Zhaoxin are deepening their strategic partnership with additional IP transfers, intended to accelerate long-term product development.
Scientists Develop Nasal Spray That Can Disable Coronavirus
In a newly released study, the concoction was effective at deactivating the novel coronavirus before it could infect cells.
Apple Cuts Fees in Half for App Store Developers Earning Less Than $1 Million
Going forward, Apple's customary 30 percent cut of sales on the iOS platform will drop to just 15 percent for smaller developers. Epic, however, claims this is just an attempt to split the developer community.