On: Apple reverses stance on Amphetamine App

[Nullabillity]

Because presumably you'd be downloading it from your bank's website?

[zepto → Nullabillity]

What if that were spoofed?

How about if there was a supply chain attack on the bank’s software?

[loa_in_ → zepto]

If there was a supply chain attack, Apple wouldn't help you either as they get the app from original developers as usual.

[zepto → loa_in_]

If there was a supply chain attack, Apple would disable the app.

[wayneftw → zepto]

Only if they knew about it. Same for your bank.

A hack is a hack. A single point of failure is actually worse for everybody.

[zepto → wayneftw]

How would the bank disable the malicious version of the app without disabling the entire service?

[wayneftw → zepto]

How would Apple do it?

There are many, many technical means available to do this. I usually control security on my server...

[sellyme → zepto]

Then I'm already going to have some pretty major problems whether or not I install an app.