How can you side load and not know what it is?
That's not possible.
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Apple's Craig Federighi Says Sideloading on iPhone Would Open the Floodgates to Malware
- Thread starter MacRumors
- Start date
- Sort by reaction score
That's not possible.
Oh, you mean the standard bootloader unlock of Samsung devices that blow an efuse? You actually can't go back.
Socially engineered to download an app to a computer; connect her phone to a computer; open a terminal and execute an install command; authorize the install on the phone?
That's what side loading usually look like.
This is patently false. It is just plain and simple scare tactics. For folks that don't know what they're doing and need their hands held at all times, then fine, feel free not to enable the functionality. But don't you dare think for second others that do will somehow harm you. If you don't enable the functionality when the option for if were to exist, it doesn't mean some mean hacker man will do nefarious activities.
App Store, which is something that was never meant to happen, as web apps were what were supposed to use, and yet the jail break community proved that wrong and proved it can then become a cash whale, which it did do just that. They are so afraid of losing a minuscule amount of money, and lets face it, the App Store isn't going away. The curated experience isn't going away. It adds a tremendous amount of value, with the trust of the gated community, as do homes inside one too.
But doesn't mean you have to stay behind one at all times. And further, it isn't just about some people wanting to save money to avoid the Apple Tax. If someone wants to spend their own money hosting and handling credit card transactions, then why not? If the money Apple collects was really about just that, handling the little stuff so developers didn't have to. And now the App Store is big business. But it is also about people getting choice. If adult websites want to have a native experience, why not? Because Stevie J was so against smut? If he was so bothered by it, then Safari should be banned.
Choice is not a bad thing. It is time for Apple to start thinking differently again. Not act like big bad IBM.
App Store, which is something that was never meant to happen, as web apps were what were supposed to use, and yet the jail break community proved that wrong and proved it can then become a cash whale, which it did do just that. They are so afraid of losing a minuscule amount of money, and lets face it, the App Store isn't going away. The curated experience isn't going away. It adds a tremendous amount of value, with the trust of the gated community, as do homes inside one too.
But doesn't mean you have to stay behind one at all times. And further, it isn't just about some people wanting to save money to avoid the Apple Tax. If someone wants to spend their own money hosting and handling credit card transactions, then why not? If the money Apple collects was really about just that, handling the little stuff so developers didn't have to. And now the App Store is big business. But it is also about people getting choice. If adult websites want to have a native experience, why not? Because Stevie J was so against smut? If he was so bothered by it, then Safari should be banned.
Choice is not a bad thing. It is time for Apple to start thinking differently again. Not act like big bad IBM.
By being talked through the process? You don’t have to know what something is to follow instructions.
Lol, what? Me thinks you don’t understand what sideloading is ?
What if she's socially engineered to log into her back account through Safari and transfer $$ to a bad actor? How is Apple preventing that?
What if she's socially engineered to install Splashtop through the App Store and give control to a bad actor?
So we should stop providing some protection because we can’t provide complete protection?
This libertarian attitude of every man for themselves and screw everyone else needs to stop.
No. The point is that it's a silly red herring / strawman argument, to pretend that we can't have sideloading just because it might add an additional threat vector on top of the myriad of existing threat vectors that already exist, and are much easier to carry out, than trying to walk Grandma through enabling sideloading and installing malware.
Where is your bleeding heart for all of the Grandmas using Android?
The nanny state sentiment of "we know best and mama can protect you from all of the dangers in the world" is the nonsense that needs to stop.
Safari and Mail are way more dangerous and easy to socially "engineer" someone into doing what you want. Aka the good ol' "I will encrypt your whole computer" (where my grandma probably would say "Yeah I don't know what you are talking about, go on" or the flaky unsubscribe tactics into getting mail integrity confirmation. Send some funny mails trying to say you're someone else as it's the common practice since the age of the dinosaurs.
You can make stupid people click all what you want if you want it and are not stupid, no sideloading needed. Malware is way less potent there as it would be through primary channels.
You are building a door where there is no wall.
You can make stupid people click all what you want if you want it and are not stupid, no sideloading needed. Malware is way less potent there as it would be through primary channels.
You are building a door where there is no wall.
And yet.. Android has a market share of 73%, the floodgates did not open and the world did not come to an end.
It's time. They have some good arguments, but in the end this is the wrong hill to die on. And since they've been getting more restrictive on MacOS, I feel a lot less comfortable that this is just something they want for iPhones
Malware isn't a good enough reason to completely lock down a phone
Malware isn't a good enough reason to completely lock down a phone
But still has a worse malware problem than iOS. Why make it worse for no real benefit to most end users?
Having to struggle with android malware on my clients on a weekly basis is floodgates enough. And how does limiting the warranty help all those who have been targeted by your phone's malware and who have possibly lost tens of thousands in money?
Maybe allow sideloading but to enable that require you to become fully financially responsible for all the harm that malware causes.
Speaking about security, Apple first should get rid of Settings > General > Reset > Erase All Content and Settings on iOS.
There are plenty of grandmas few clicks away from losing all their photos and stuff, if they're on the base iCloud 5 Gb plan.
There are plenty of grandmas few clicks away from losing all their photos and stuff, if they're on the base iCloud 5 Gb plan.
I don’t know but I suspect you are to young to know how getting old and not being able to track all of those changes and new ways of exploitation come up. Trust me it will happen to you where you think you’re doing a good job of managing it all and then you find out some organization found a clever way to exploit even you. Apple’s system is NOT perfect but it is more affective than opening the gates and expecting people to adapt and get smarter.
Can’t you simply go to android or jailbreak your iphone? When you change a system like that it will affect people who don’t use those options. You give your friends your information all the time. Now their side loading potential can compromise you.
Technically it’s already happening. We don’t need to make it even easier.
I don’t understand why people want Apple to make this change if they can just choose an option that already exists for them to do so.
It like being in a relationship with a hot person because they are hot but don’t like other things about their personality and tell them they need to change for your benefit. Just leave the relationship and find something that makes you happy and let them be themselves whether it’s healthy or not.
Your comment is comically ignorant to the motivations of malicious actors who will exploit any platform. Just because your one DOS emulator is safe doesn’t mean it will remain safe or that other apps people want from side loading won’t be a point of ingress for such an attack.
I have been an Apple customer for many years. I have 2 Macs (3 of you count a still-working 2007 MBP in my closet), an iPad, an Apple Watch … I’ve got a lot of software, apps, and purchased content.
So, no, I can’t just buy a new phone for a relatively minor feature.
In any case, yet again I have someone assuring me that other people doing things to their personal phones will somehow affect you.
But I notice you don’t specify precisely how, other than being certain it will be bad, so very bad …