Getting root with benign AppStore apps(theevilbit.github.io)
theevilbit.github.io
Getting root with benign AppStore apps
https://theevilbit.github.io/posts/getting_root_with_benign_appstore_apps/
4 comments
He had an open unpublished conversation with Apple Security and notified them of his own published app, so “if they figured out who” seems inapplicable here.
Yes, hence why it was a gamble. There was a significant chance that they’d go after him after he told them he put an exploitable app on the App Store.
Has this also been fixed in High Sierra?
Actually, library validation will check if the binary is signed with the same team ID.
> I signed up with a new Apple ID for the Apple developer program just because I had the fear that they will ban me, once I introduce an app that can be used for private escalation. In fact they didn’t.
Apple has a history of going after people who try to find holes in the App Store’s security model. This was a huge gamble; they could have your life quite miserable if they figured out who was behind this.