iOS 17.2 Hints At Apple Moving Towards Letting Users Sideload Apps (9to5mac.com) 33
9to5Mac has found evidence in the iOS 17.2 beta code that hints the company is moving towards enabling sideloading on iOS devices. From the report: iOS 17.2 has a new public framework called "Managed App Distribution." While our first thought was that this API would be related to MDM solutions for installing enterprise apps (which is already possible on iOS), it seems that Apple has been working on something more significant than that. By analyzing the new API, we've learned that it has an extension endpoint declared in the system, which means that other apps can create extensions of this type. Digging even further, we found a new, unused entitlement that will give third-party apps permission to install other apps. In other words, this would allow developers to create their own app stores.
The API has basic controls for downloading, installing, and even updating apps from external sources. It can also check whether an app is compatible with a specific device or iOS version, which the App Store already does. Again, this could easily be used to modernize MDM solutions, but here's another thing. We also found references to a region lock in this API, which suggests that Apple could restrict it to specific countries. This wouldn't make sense for MDM solutions, but it does make sense for enabling sideloading in particular countries only when required by authorities -- such as in the European Union. Under the European Union's Digital Markets Act, or DMA, big tech companies will be required to, among other things, allow users to install any apps they want from third-party sources. "In theory, Apple is required to comply with DMA legislation by March 2024," reports 9to5Mac. "The company has even admitted in a Form 10-K filing that it expects to make changes that will impact the App Store's business model."
The API has basic controls for downloading, installing, and even updating apps from external sources. It can also check whether an app is compatible with a specific device or iOS version, which the App Store already does. Again, this could easily be used to modernize MDM solutions, but here's another thing. We also found references to a region lock in this API, which suggests that Apple could restrict it to specific countries. This wouldn't make sense for MDM solutions, but it does make sense for enabling sideloading in particular countries only when required by authorities -- such as in the European Union. Under the European Union's Digital Markets Act, or DMA, big tech companies will be required to, among other things, allow users to install any apps they want from third-party sources. "In theory, Apple is required to comply with DMA legislation by March 2024," reports 9to5Mac. "The company has even admitted in a Form 10-K filing that it expects to make changes that will impact the App Store's business model."
I hope they include it in iPadOS 17.2 and... (Score:2)
iPhoneOS 17.2. Don't only the iPod and HomePod run regular iOS anymore?
Well no 17.2 for me right now... (Score:3)
Well no 17.2 for me right now, I am still on 15.8 with my iPhone 6S. I ain't no Apple fan boy but one thing I give to Apple is that the 6S still receives OS updates. I mean, how many companies actually maintain 2 versions of OS these days?
I barely use use the damned thing!
app installed form the store: 0
cell data: Off (momentarily turned on to check mail when it's the only device accessible)
Bluetooth: Off
wifi: Off (excepted momentarily on for OS updates)
etc.
Re: (Score:2)
Google maintains support for very old versions of Android too, with security fixes. They are delivered direct from Google, rather than from the device manufacturer.
Anyway, if true then this is a big win for EU citizens.
Re: (Score:2)
Interesting! I have android studio installed in a lxc container so I can easily run the android vm. I seldom use it but I had to fix an app once.
I have genuine questions:
1) Can you upgrade an Android OS from Google if you android phone is locked or it needs to be "rooted"for that?
2) My iPhone 6S isn't tied to any carrier, I can switch to any carrier simply by switching the SIM card. Nevertheless, I think my iPhone is not "rooted", kind of still locked by Apple, am I understanding this correctly?
Thanks,
Re: Well no 17.2 for me right now... (Score:2)
No root required:
https://source.android.com/doc... [android.com]
Re: (Score:2)
Android OS level upgrades need to either come from the manufacturer, or for most popular smartphones you can install the open source Lineage OS. One thing you might like about Lineage is that Google components are optional, and can mostly be replaced by open source ones if you like.
OS updates are separate from OS component updates. For example, the Android webview component that most apps use to show HTML content is updated separately to the OS. You get security updates for those direct from Google, which i
Censorship opt-out? (Score:1, Troll)
The worst thing about Apple is they can and do censor apps for political reasons. It's an autocracy.
Before this change and after jailbreaks went away there was no recourse for you to get an app you relied on or recoup your lost investment.
We'll have to see what rules they set for apps that get that bit set. They may still insist on bootstrapping the process and setting restrictions.
Re: (Score:1)
You can go ahead and say it since we know what you're talking about: Parler
It was a miserable flop not because it was briefly yanked from the App Store, but because it failed at achieving the goal the alt-right has for social media - putting their speech in front of everyone who sits left of them on the political spectrum. The ability to sideload the app would've made little difference towards that goal, because nobody is going to jump through hoops just to participate in an alt-right circle jerk.
That bein
Re: (Score:2)
That being said, I do think Apple shouldn't be the arbiter of what kind of content you're allowed to consume on your phone, but mostly that's because I see nothing wrong with emulators, Kodi, and porn (18+ and consensual, obviously).
If Apple maintained a monopoly or had such an outsized market share that consumers had no choice to use iOS, I would agree. Basically, if it were 90s Windows where, although other OSes existed, software support was so heavily concentrated on the one that it was the de facto standard. But that's not the case. The most common mobile OS is Android and it gives consumers the sideloading option.
It's too bad there isn't the zeal behind solutions like PostmarketOS and PinePhone like there is for government to micr
Re: (Score:2)
I guess this all comes down to what perspective you want to take. One stance, you bought the iphone and it's yours. You bought the hardware so why should they get to dictate every way it can be used? That's why sideloading should be a thing and they shouldn't be stopping their users from doing that.
On the other hand, you could argue they are buying into that "experience" and part of the Apple experience is them putting you in their walled garden where you follow all their rules and even prefer it this way.
I
Not good for the average user (Score:3, Interesting)
No matter how much you want to hate on Apple and their walled garden.. simply having this as a possible button to enable will be a disaster. Because now all the funny little malware we mostly kept off of average Joes phones will now have a clear way in. And hiding it behind a single Are you sure? is definitely not going to help. We seen how it goes on PCs, they will hysterically click on anything.
The fact that this will become possible is terrible news for the average user where the top priority is to just give them a half decently secured device. The walled garden kept a LOT of garbage out.
When this falls, the botnets and malware distributions will rejoice.
Re: Not good for the average user (Score:2, Troll)
The sensible thing to do given that apple users aren't used to thinking for themselves is to require the user to jump through some extra hoop to enable side loading. Make them sit through a short video about malware for example. They won't necessarily watch it but they won't have any excuses either.
Re: (Score:2)
I was about to suggestion the same thing. Make them go through several steps and use all the scary language they can come up with on why they don't recommend you side load and are you triple sure this is what you want to do. I'm going to guess 99% of iphone users won't even utilize this ability.
Re: (Score:3)
simply having this as a possible button to enable will be a disaster. Because now all the funny little malware we mostly kept off of average Joes phones will now have a clear way in. And hiding it behind a single Are you sure? is definitely not going to help.
Tell me you haven't used a Mac recently, without telling me.
On the one hand, I can appreciate the tightening up of the areas you're talking about...but on the other hand, Safari has an 'are you sure' prompt, for file downloads, on a per-domain basis. Then, if you download an executable (as I did last night with AngryIP), it won't let you run it from the download list, you have to go to the file in Finder, do a right-click and then run it, and you get *another* warning prompt about running the app before it'
Re:Not good for the average user (Score:4, Informative)
No matter how much you want to hate on Apple and their walled garden.. simply having this as a possible button to enable will be a disaster. Because now all the funny little malware we mostly kept off of average Joes phones will now have a clear way in. And hiding it behind a single Are you sure? is definitely not going to help. We seen how it goes on PCs, they will hysterically click on anything.
That's what defense in depth is for. On iOS, assuming they don't allow outright unsigned, non-sandboxed apps, the user would still have to give the app permission to do things like access your photos, mail, calendar, etc., and an app that shouldn't be accessing your photos that asks for photos permission would raise red flags. You can also grant limited permission, e.g. let the app see only a single photo selected by you (e.g. to add a profile picture). And so on.
The fact that Windows users basically run everything as an admin user with elevated permissions and with every app having access to all the data on the device doesn't mean that other platforms work that way.
And the fact that Android isn't an absolute cesspool of users side-loading malware presumptively disproves your theory.
The beginning of the end (Score:3, Interesting)
If iPhone allowed sideloading, then it would be the beginning of the end of iPhone.
Other than having a relatively safe walled-garden, what's the advantage of iPhone over other smart phones?
Oh, it's optional, you may say. But no, sideloading won't be optional for long. Soon Meta will open their own app store and Facebook & WhatsApp would be pulled from Apple's store, then you either sideload FB/WA or your iPhone will have no FB/WA. Then Amazon will pull Kindle from Apple's store and put in its own store, again, sideload or you don't have Kindle on your iPhone/iPad anymore. etc. etc.
Eventually most dev will require sideloading of their app, then iPhones will become malware galore. Nightmare for anyone who have to support their families' phones. Whereas right now, I give iPhones to my family with family share and they need no support effort from me at all.
When iPhones allow sideloading, it's time to look for other phones for my next upgrade.
Re: (Score:2)
Eventually most dev will require sideloading of their app, then iPhones will become malware galore.
Yeah, it's like Android, where every phone has 20 different app stores. Right?
Re: (Score:2)
Eventually most dev will require sideloading of their app, then iPhones will become malware galore.
Yeah, it's like Android, where every phone has 20 different app stores. Right?
Does Google's store have as many rules for apps as Apple's store? No? Ever wondered why?
Re: (Score:2)
You can side load on the iPhone but they don’t make it straightforward and you have to re authorize it regularly.
Re: (Score:2)
If by reauthorize, you mean re-sign the app once a month using Xcode on a Mac and re-upload it to the device, then yes. Not exactly practical for most end users.
Re:The beginning of the end (Score:4, Informative)
Your doomsday scenario of developers running their own app stores didn't happen on Android. Even on Windows, where it is trivial to distribute your own apps, most game developers have coalesced around Steam as the standard.
what's the advantage of iPhone over other smart phones?
How about the length of time they're supported with OS updates, the ease of getting support at a local Apple store, the financing options Apple offers, iMessage, and the fact that you're not handing your life over to an advertising company?
Re: The beginning of the end (Score:1)
Re: (Score:2)
I'll stick with that moron. Those Ivy leaguers clearly don't have your best interests in mind. Their entire goal is to convince you that you must spend spend spend and that you need whatever stupid shit they are trying to sell.
Maybe you like ads. I personally do my best to avoid them in any way I can. If I want to know about something, I'll go search for it and do some research. The only time I see ads at all is because I like watching football, otherwise I wouldn't have to deal with ads in any capacity. I'
Re: (Score:2)
Talk about scaremongering. I use approximately two app stores on android and they both came preloaded on my phone. One's play store, the other is samsung's store. I don't see why this would be massively different on the iphone if they enabled sideloading. If anything, this will actually cause Apple to sweeten the istore deal. Sideloading isn't going to be used by the vast majority of users unless Apple continues to make the istore impractical.
Re: The beginning of the end (Score:2)
f-droid or go home :-). I use Google Play and f-droid only, though.
Re: (Score:2)
Other than having a relatively safe walled-garden, what's the advantage of iPhone over other smart phones?
Faster CPUs with lower power consumption, Emergency SOS, support for watching purchased iTunes TV/Movie/Music content, support for running the apps you already have, an extremely polished iCloud ecosystem for sharing passwords, notes, calendars, and so on across all of your devices in a secure and reliable way, automatic encrypted backups, and a long history of saying "no" when governments pressure it to weaken its security for the government's benefit.
Re: (Score:3)
If iPhone allowed sideloading, then it would be the beginning of the end of iPhone.
You always say "if you don't want to deal with a walled garden don't use an iPhone"
Well, if you don't want to deal with elevated risk of malware, don't use sideloading.
Why do you want Apple to be your mom anyway? It will never love you.
Re: You know what they say... (Score:3)
It already offers that. For instance, my company decided a while ago to use something called Workspace one, by Cisco, or something like that. It, itself, gets installed, but once itâ(TM)s installed, it, install a management certificate, and then can install other custom the phone
Great, I might get an iPhone if this is released (Score:2)
I have half a dozen sideloaded apps on my Android phone, things like BBC iPlayer to watch with a VPN. There is no reason for me to give these app just to try a different phone brand. If I can sideload whatever apps I want, it will be an apples to apples comparison on price and features, no pun intended. Not as good as being able to customize your system image on many Android phones, but serves most common needs.