Apple reminds developers how they can get a valid version of Xcode<div class="field field-name-body field-type-text-with-summary field-label-hidden"><div class="field-items"><div class="field-item even" property="content:encoded"><p><a href='
http://www.imore.com/apple-posts-instructions-validating-installations-xcode' title="Apple reminds developers how they can get a valid version of Xcode"><img src='
http://www.imore.com/sites/imore.com/files/styles/large_wm_brw/public/field/image/2015/09/xcode-mac-start-hero.jpg?itok=EDcSw7ah' />[/url]</p> <p>Apple has posted instructions for developers to ensure that they download valid copies of Xcode. This follows the discovery of XcodeGhost, a counterfeit version of Xcode infected with malware, which was then used to compile apps that were also infected.</p> <!--break--> <p>First, Apple encourages developers to only download Xcode from the Mac App Store, or from the Apple Developer website, leaving the Mac's Gatekeeper on to protect against tampered software. From
Apple:</p>
<p>When you download Xcode from the Mac App Store, OS X automatically checks the code signature for Xcode and validates that it is code signed by Apple. When you download Xcode from the Apple Developer website, the code signature is also automatically checked and validated by default as long as you have not disabled Gatekeeper.</p>
<p>Apple also posted instructions for validating your copy of Xcode, which you can find below.</p> <div class="pressrelease"> <p>To verify the identity of your copy of Xcode run the following command in Terminal on a system with Gatekeeper enabled: spctl --assess --verbose /Applications/Xcode.app</p> <p>where /Applications/ is the directory where Xcode is installed. This tool performs the same checks that Gatekeeper uses to validate the code signatures of applications. The tool can take up to several minutes to complete the assessment for Xcode.</p> <p>The tool should return the following result for a version of Xcode downloaded from the Mac App Store: /Applications/Xcode.app: accepted source=Mac App Store</p> <p>and for a version downloaded from the Apple Developer web site, the result should read either /Applications/Xcode.app: accepted source=Apple</p> <p>or</p> <p>/Applications/Xcode.app: accepted source=Apple System</p> <p>Any result other than 'accepted' or any source other than 'Mac App Store', 'Apple System' or 'Apple' indicates that the application signature is not valid for Xcode. You should download a clean copy of Xcode and recompile your apps before submitting them for review.∂</p> </div> </div></div></div><br clear='all'/>
<a href="
http://rc.feedsportal.com/r/238386218189/u/49/f/616881/c/33998/s/4a122fd3/sc/28/rc/1/rc.htm" rel="nofollow"><img src="
http://rc.feedsportal.com/r/238386218189/u/49/f/616881/c/33998/s/4a122fd3/sc/28/rc/1/rc.img" border="0"/>[/url]
<a href="
http://rc.feedsportal.com/r/238386218189/u/49/f/616881/c/33998/s/4a122fd3/sc/28/rc/2/rc.htm" rel="nofollow"><img src="
http://rc.feedsportal.com/r/238386218189/u/49/f/616881/c/33998/s/4a122fd3/sc/28/rc/2/rc.img" border="0"/>[/url]
<a href="
http://rc.feedsportal.com/r/238386218189/u/49/f/616881/c/33998/s/4a122fd3/sc/28/rc/3/rc.htm" rel="nofollow"><img src="
http://rc.feedsportal.com/r/238386218189/u/49/f/616881/c/33998/s/4a122fd3/sc/28/rc/3/rc.img" border="0"/>[/url]
<img src="[url]http://da.feedsportal.com/r/238386218189/u/49/f/616881/c/33998/s/4a122fd3/sc/28/a2.img" border="0"/>[/url]<img width="1" height="1" src="
http://pi.feedsportal.com/r/238386218189/u/49/f/616881/c/33998/s/4a122fd3/sc/28/a2t.img" border="0"/><img width='1' height='1' src='
' border='0'/><img src="
http://feeds.feedburner.com/~r/TheIphoneBlog/~4/dv-rCCLleic" height="1" width="1" alt=""/>
Source:
Apple reminds developers how they can get a valid version of Xcode
