I foretold that Mac app notarization is security theater (lapcatsoftware.com)

submitted 2 weeks ago by bestboyfriendintheworld@sh.itjust.works to c/apple_enthusiast@lemmy.world

2 comments fedilink hide all child comments

top 2 comments

sorted by: hot top controversial new old

[-] YetAnotherNerd@sopuli.xyz 1 points 2 weeks ago

Could Apple not then revoke their certificate, preventing any future occurrences?

[-] Repelle@lemmy.world 1 points 2 weeks ago

Yes, and additionally if I’m reading this correctly, this attack would only work for people whose security settings are to run any signed code from trusted developers. One of the standard options is trusting only App Store distributed code for which this attack would not work

this post was submitted on 22 Dec 2025

3 points (100.0% liked)

Apple

19810 readers

4 users here now

Welcome

to the largest Apple community on Lemmy. This is the place where we talk about everything Apple, from iOS to the exciting upcoming Apple Vision Pro. Feel free to join the discussion!

Rules:

No NSFW Content
No Hate Speech or Personal Attacks
No Ads / Spamming
Self promotion is only allowed in the pinned monthly thread

Lemmy Code of Conduct

Communities of Interest:

Apple Hardware
Apple TV
Apple Watch
iPad
iPhone
Mac
Vintage Apple

Apple Software
iOS
iPadOS
macOS
tvOS
watchOS
Shortcuts
Xcode

Community banner courtesy of u/Antsomnia.

founded 2 years ago

MODERATORS

MichelleG@lemmy.world

thisisdee@lemmy.world

RoyalEngineering@lemmy.world