• misk@sopuli.xyzOP
    link
    fedilink
    arrow-up
    2
    ·
    8 months ago

    They’re suggesting to piggy-back off acquaintances Macs since a single one is fine for 10-20 accounts per their reporting. At that point I wonder if you could spin minimal Hackintosh install in a VM to keep it going.

    • jard@sopuli.xyz
      link
      fedilink
      arrow-up
      3
      ·
      8 months ago

      Meh, it all sounds unsustainable in the end IMO. I mean, OG Beeper Mini was built on piggybacking off of a set of Mac Mini serial numbers, and Apple already plugged that hole.

      Even then, internalized testing of an exploit and what actions a company would tolerate from abusing that exploit is very different from what that same company would tolerate once the exploit becomes publicly available. This is coming from personal experience — back in my “seedier” days I’d fuck around with random public APIs for the fun of it to see what I can do, and with my own “internal testing” I found I could get away with a lot. Once I shared that knowledge with others, I found that companies are far more willing to crack down on abuses of their API than my “internal testing” suggested otherwise.

      I fully expect that Apple will probably revise the “10-20 accounts per Mac” fact once this fix actually starts to kick off.