Apple Developer Program Co-opted to Install Pirated iPhone Apps
Apple has traditionally kept is smartphones locked down to prevent unauthorized app installs, but there is a program that helps companies test and distribute non-public apps. It appears that some clever and unscrupulous folks on the internet have co-opted that technology to provide hacked and pirated apps. Apple, understandably, is not pleased.
When using an iOS device, you can usually only download apps from the App Store. Some users resort to complicated and dangerous hacks to “jailbreak” phones to unlock more capabilities, but that’s harder than it used to be. Shady app marketplaces like TutuApp, Panda Helper, AppValley, and TweakBox make use of Apple’s enterprise developer certificates to get around that.
If that sounds familiar, it’s because Apple’s certificate program was in the spotlight recently thanks to Facebook and Google. Both companies were found to be using enterprise developer certificates to install powerful traffic analysis apps on the phones of volunteer customers. This was a violation of Apple’s policies, so both companies had to end the practice. That prompted Reuters to look for other evidence of misuse, which it found in the above app repositories.
All the above app providers advertise the availability of paid apps and games for free, as well as hacked/modded content. iDevice users are invited to install the store’s certificate, which allows the client to push apps outside the App Store. A stolen version of Minecraft or Facetune would never pass muster in the App Store, but TweakBox or Panda Helper can do whatever they want in their own little ecosystem. The stores also offer free-to-play and ad-supported content with mods that strip out the monetization.
Many of these underground app marketplaces have their own ads to make money, and a few offer paid subscriptions with access to exclusive hacked content and other perks. All of them are siphoning off money from Apple and independent developers, though.
Apple can’t control what developers do with the enterprise certificates, but it can revoke them. That’s what it did (briefly) with Facebook and Google when they were caught misusing the program. When reached for comment, Apple said it’s ready to take immediate action. Canceling a certificate immediately suspends all apps installed via that certificate. At least one of the app provides cited in the Reuters report has already gone offline.
Even if you don’t care about the ethical angle, giving any of these services access to your device is a bad idea from a security standpoint. There’s no telling what’s lurking in these hacked apps.
Continue reading
SpaceX All-Civilian Inspiration4 Crew Completes Successful Trip
While in low earth orbit, the mission’s four passengers took some out-of-this-world selfies and placed the first-ever sports bet from space.
The Pirated Version of Final Fantasy XV is Much Faster Than the Legal Game
Final Fantasy XV's PC implementation is supposed to be the best version of the game, but the Denuvo implementation is hitting performance hard.
Don’t Buy a Cheap Chromebook on Black Friday Without Checking the Update Expiration Date
Black Friday sales are almost upon us, and it's a foregone conclusion that Chromebooks will feature prominently in many retailers' sales. However, you'd do well to make sure that laptop is worth buying even for a pittance before you pull the trigger.