Hacker News Reader

I'm not an iOS dev, so correct me if I'm wrong, but aren't these specifically App Store entitlements? So if you try to submit an app using an API covered by one without having been granted permission to it, that request will fail, but if you're just building and running on your own hardware you can use any private API you feel like?

View on HN

Not the way it works. On non-jailbroken iOS, entitlements are enforced at the kernel level. If your app is signed with an entitlement that isn’t listed in the provisioning profile (which only Apple can generate with its private key), the system rejects the binary. It’s the same on Mac, but you can disable amfi to get rid of that shit, which used to also be possible on jailbroken iOS.

Huh. Thanks; I stand corrected. The last time I messed with iOS development was years ago, and you could sign and deploy whatever you wanted locally. I forget if it required a developer account then, but definitely not a paid one.

I assume you mean locally on the simulator. On device, it has been as I described since iPhone OS 2.0.

Reply on news.ycombinator.com