Path: csiph.com!xmission!feeder.erje.net!us.feeder.erje.net!bloom-beacon.mit.edu!bloom-beacon.mit.edu!panix!MIX!Blackbird From: billy@MIX.COM Newsgroups: alt.comp.freeware,comp.sys.mac.system,alt.hacker,alt.privacy.anon-server,comp.os.linux.advocacy Subject: Re: "Unhackable" Apple Confirms Malware-Infected Apps Found And Removed From Its Chinese App Store Date: Tue, 22 Sep 2015 16:14:05 +0000 (UTC) Organization: PANIX Public Access Internet and UNIX, NYC Lines: 32 Message-ID: References: <86549329f10d815d2e5922dee68cf94a@anemone.mooo.com> <210920151816339085%nospam@nospam.invalid> NNTP-Posting-Host: panix5.panix.com X-Trace: reader2.panix.com 1442938445 22358 166.84.1.5 (22 Sep 2015 16:14:05 GMT) X-Complaints-To: abuse@panix.com NNTP-Posting-Date: Tue, 22 Sep 2015 16:14:05 +0000 (UTC) Xref: csiph.com alt.comp.freeware:243430 comp.sys.mac.system:80157 alt.hacker:7972 alt.privacy.anon-server:45104 comp.os.linux.advocacy:322085 In comp.sys.mac.system Jolly Roger wrote: > The normal way to get Xcode is through the App Store application on your > computer. Downloading it this way ensures it is from Apple. Developers > had to go out of their way to get it from untrusted sources instead. > > Then, developers who downloaded this illegitimate Xcode installer also > saw a Gatekeeper warning dialog box on their computer telling them that > this copy of Xcode isn't valid and is not signed by Apple and should be > replaced. > > Then those developers had to *disable* or *bypass* Gatekeeper to allow > the application to run on their computers. I don't know about that.. I have it enabled, and it never complained about this (yea, I never checked until now, though, heh) - $ spctl --assess --verbose /Applications/Xcode.app /Applications/Xcode.app: a sealed resource is missing or invalid $ spctl --assess --verbose /Volumes/Xcode/Xcode.app /Volumes/Xcode/Xcode.app: accepted source=Apple System I'd be interested in what results other people get from their installed copies. Billy Y.. -- sub #'9+1 ,r0 ; convert ascii byte add #9.+1 ,r0 ; to an integer bcc 20$ ; not a number