38: Episode 38 - We don't need a studio audience

Published: Aug. 29, 2014, 9:15 p.m.

b'Tweet Shoutouts\\n\\n\\n@dh_thomas @iOhYesPodcast @shelly Enjoyed the show with @Sommer. Good job, guys.\\n\\n\\u2014 Steven Aquino (@steven_aquino) August 22, 2014\\n\\n\\n@dh_thomas @iOhYesPodcast Perfect timing, thx! #ios #appdev\\n\\n\\u2014 Brent Engels (@ebrent) August 22, 2014\\n\\n\\n\\n\\n\\nSend us your shoutouts:\\xa0@iohyespodcast\\n\\nThe Discussion\\n\\n\\n\\n \\u201cOn the feasibility of Large Scale Infections of iOS Devices\\u201d\\n\\n 2 Security Issues\\n\\n the iTunes syncing process is vulnerable to Man-in-the-Middle (MitM) attacks\\n an iOS device can be stealthily provisioned for development through USB connections. This weakness allows a compromised computer to arbitrarily remove installed third-party apps from connected iOS devices and install any app signed by attackers in possession of enterprise or individual developer licenses issued by Apple.\\n\\n\\n\\n\\n CloudKit\\n\\n Cost model - https://developer.apple.com/icloud/documentation/cloudkit-storage/\\n\\n Any hard numbers yet?\\n\\n\\n vs. Parse\\n\\n Parse supports JS, Android, Java, etc.\\n Cloudkit - iOS 8+ / OS X 10.10+ devices\\n CKRecord == PFObject, CKQuery == PFQuery, CKAsset == PFFile?\\n What\\u2019s the difference in pricing?\\n CK doesn\\u2019t have any server-side capabilities (just data storage + pub/sub on changes)\\n\\n This seems like potential tech-debt\\n\\n\\n\\n\\n CKDiscoverAllContactsOperation\\n\\n https://developer.apple.com/library/prerelease/ios/documentation/CloudKit/Reference/CKDiscoverAllContactsOperation_class/index.html#//apple_ref/occ/cl/CKDiscoverAllContactsOperation\\n \\u201cThe search of the user\\u2019s address book does not return any personal data about the user\\u2019s contacts. The search returns only the IDs of the corresponding user records, which contain only data that your app puts there.\\u201d\\n Requires user permission\\n Implications: if this is successful, Apple will have a giant graph of users\\u2019s contacts.\\n\\n\\n\\n\\n\\n\\n\\nOpen-Source project of the week\\n\\n\\nSignal from Whisper Systems (source: https://github.com/WhisperSystems/Signal-iOS)\\n\\n\\n Background\\n\\n Moxie\\u2019s former(?) company/organization\\n is compatible w/ RedPhone, their secure call Android app\\n \\u201cSignal provides end-to-end encryption for your calls, securing your conversations so that nobody can listen in.\\u201d\\n Available on the App Store: https://itunes.apple.com/app/id874139669\\n\\n\\n Secure text messaging to come\\n\\n\\n\\nPicks\\n\\n\\nChad (@jazzychad)\\n\\n\\n\\n Weird iOS\\xa0 -- Really weird iOS apps\\n sfxr\\xa0 -- \\xa0Random sound effect generating app\\n\\n\\n\\nJason\\xa0(@jak)\\n\\n\\n\\n YouTab \\xa0- \\u201cThe Wiki of Chords and Lyrics,\\u201d synchronized to recordings / Youtube videos. Play along with and learn your favorite songs, right in your web browser. Built-in editor for adding new songs.\\n 1Password app extension\\n\\n\\n\\nJohn\\xa0(@johnsextro)\\n\\n\\n\\n Do you use Core Data? \\xa0Checkout Core Data Editor\\n\\n\\n\\nAlternative show title suggestions\\n\\n\\n\\n Sniffing your SMS\\n Let\\u2019s see what happens\\n A big bad way\\n A fart in the wind\\n If it doesn\\u2019t happen now\\n Zombie botnet apocalypse\\n I was being the studio audience\\n We don\\u2019t need a studio audience\\n The ultimate lock-in\\n I don\\u2019t know when to quit'