XcodeGhostSource / XcodeGhost

"XcodeGhost" Source
1.92k stars 799 forks source link

兄弟,还是自首吧 #25

Open zfpan1981 opened 9 years ago

zfpan1981 commented 9 years ago

这个小案也就罚点钱,出来后去大公司做安全。我看了你的代码,写得非常有水平。 iOS Runtime 居然被你这么用了。

zfpan1981 commented 9 years ago
    if ([[UIApplication sharedApplication ] canOpenURL:[NSURL URLWithString:[dict objectForKey:@"scheme"]]]) {
        return;
    }

兄弟,你太牛了

zfpan1981 commented 9 years ago

另外,你启用IAP,这绝对是有恶意的,肯定要出问题的

    SKStoreProductViewController *productViewController = [[SKStoreProductViewController alloc] init];
    NSDictionary *appParameters = [NSDictionary dictionaryWithObject:appID
                                                              forKey:SKStoreProductParameterITunesItemIdentifier];

    [productViewController setDelegate:self];
    [productViewController loadProductWithParameters:appParameters
                                     completionBlock:^(BOOL result, NSError *error)
     {

     }];
    UIViewController *rootViewController=[[[UIApplication sharedApplication] keyWindow] rootViewController];
    [rootViewController presentViewController:productViewController animated:YES
                                   completion:^{ } ];
xyxyxyxyxy commented 9 years ago

从域名注册商和 AWS 的使用的支付方式可以揪出来背后是谁。不管是谁,坐牢都是必须的,这可不是罚点钱这么简单。