Sideloading and Apple's Prisoner
summary
Explains mechanisms for installing iOS apps outside App Store/TestFlight without jailbreaking, detailing how app code signing works and Apple account types used for signing. Compares sideloading tools AltStore and SideStore (how they work, pros/cons), examines paid Apple accounts and the App Store Connect API for installing apps, and outlines a possible distribution scheme if the Apple Enterprise Developer Program disappears. Also presents a cross-platform alternative to codesign that runs on Linux and describes how to set up Ad Hoc app distribution.
AI-written summary · about
chapters (18)
- 0:00Introduction
- 1:28Speaker and talk motivation
- 2:10Why iOS is a closed system
- 7:11App digital signatures
- 7:56Apple account types
- 11:29What is sideloading
- 13:58AltStore and Sideload Store overview
- 17:50AltStore vs Sideload Store
- 18:11Automation via Apple Developer Program
- 20:15Getting device UDID
- 21:42Creating and signing mobile config
- 23:08iOS 16 limits and workarounds
- 23:51App Store Connect API
- 24:52Developer certificate generation
- 25:57Signing IPA with Zsign
- 27:21Air installation
- 28:45Summary and comparison
- 30:50Q&A
related talks
01h 14mHacking and Injecting Your Own Code into Someone Else's App
01h 08mPlaying With the Limits: Can Your App Run Arbitrary Binary
02h 39mSu-A-Cyder: Homebrewing Malware for IOS Like a BO$$!
37mEnterprise Apps: Bypassing the IOS Gatekeeper
25mHow SSL Pinning Reinforces iOS App Security
44mRunning Apps on Your Own iOS Simulator
34mHacking Marzipan, Running iOS apps on Mac
28mShip it Safe