Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I don't think I agree with your conclusion about their endgame being a replication of the iOS App Store golden goose, but I do see how it could come about. The reason I disagree is because changes like this oft remind me of the problems Facebook used to have (still do?) with stolen tokens and cookies that would come about from people pasting JavaScript into their browser's devtools console.

Some poor schmuck would find a viral comment that said something like "Mark Zuckerberg doesn't want you to know how to get Facebook Premium! Copy and paste this code into your browser, ignore Facebook's warnings, they don't want you to get it for free!" And badabing badaboom, stolen credentials get sent to some server.

I don't work at Apple and can only speculate on their motive, but since I advise my family to use macOS, it's my hope that this change would prevent them from reading something like "download this scary blob and then ctrl+click on it to open it for free Photoshop! Ignore Apple's warning, Adobe has paid them because they don't want you to get it for free!"

It does make it slightly more inconvenient for me, but I think chromedriver may be the only unsigned code that I run regularly.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: