Safe to share signed IPA files?

Hello!
I am a part of the Developer program. A friend (who is not part of the developer program) has worked on an independent project and wants to showcase it to his client. He has asked if I could sign his project (for which he has shared the source code) with an ad-hoc provisioning profile and has shared the UDID of the device. Is there any security vulnerability or potential problem that could arise out of this?
I know that the provisioning profile can be extracted from the signed IPA. I managed to open the profile and saw a "developer certificate" field with some data in it. Could this be then re-used/misused?
Thanks for the help!

That's not what your developer account is for.
It's for you to use to develop and sell your own apps in the App Store.
If your friend can't afford the entry price to be a developer, that's not your problem.

Similar Messages

  • Sign .sis files - Safe?

    Hi
    have you guys ever signed an aplication?
    Check this link: http://symbianv3.com/how-to-sign-sis-files-in-easy-3-steps/
    Is this actually safe? Can it dammage my phone in any way?
    It says in the tutorial, that i should give them my IMEI. Is it safe to do that?
    Thank you so much for your help.
    Message Edited by Trgovec on 15-Jan-2010 08:41 PM
    Solved!
    Go to Solution.

    well technically it is safe yes, but if anything goes wrong, it will be YOUR responsibily. Nokia will not be able to repair your phone if anything happens to it, thats the only downside.
    but if you trust the supplier, and others have commented on that specific app working out fine, then go for it. (but at your own risk) dont say that i told u to do anything
    if iv helped in anyway, hit the kudos button
    If iv helped in anyway, hit the kudos button

  • How to share EFS encrypted files over a network (\\workstation\c$\encrypted-file.txt)

    Hello,
    we decided to theft-protect our workstations by using EFS encryption on some important documents and directories.
    Just to be sure: I hope that data will not be readable in the case that someone physically gains access to the disk or computer with encrypted data and does not know user's name & password to log in or does not have the right encryption certificate with
    private key. Please correct me, if I'm wrong.
    All workstations are Windows 7 Professional joined to the domain controlled by Windows 2008R2 DC. We are a bit lazy, so we have generated a local, self-signed EFS certificate on a single workstation and installed this (the same) certificate on all workstations.
    Now, we are able to share EFS encrypted files for example via a NTFS formatted flash drive.
    Later, we have setup a Certificate authority (we can potentially issue new EFS personal, domain-based certificates that are published in AD), and established DRA as well (published DRA via a Group Policy).
    All logged-in users have the same (non-domain) certificate installed in their "My User Account" certificate store, cipher /y command shows the same thumbprint value.
    However, we would like to be able access files remotely, in a "lazy" way using an administrative share like
    \\workstation\c$\users\bob\document.txt. We all are Domain Admins, so NTFS and SMB privileges should be OK, unencrypted files are accessible OK.
    I have tried to issue a new certificates via the Cert Authority, putting them into "Trusted People" container etc., adding them to the "Users who can access this file:" list on the encrypted file and nothing worked.
    So is it possible to share EFS encrypted files over a workstation's share (i.e.
    \\workstation\something)?
    What should I do to get it working? :-)
    Thank you for any ideas.
    Jan

    OK, I understand that. However, I have read this article
    Using Encryption File System (Technet)
    and there is stated "Remote EFS operations on files stored on network file shares are possible in Windows 2000 or later domain environments only. Domain users can remotely encrypt or decrypt files,
    but this capability is not enabled by default"
    There are notes about computer trust etc., so I am seeking for someone who would help me a little bit with this.
    Just imagine the simplest possible "single-user" case: there are two Win7 computers A, B joined into the domain and just single user BOB. Bob uses those two computers and need to access own documents like
    \\A\DocumentsA or
    \\B\DocumentsB. Standard setup - folder sharing: everything is working fine, share and NTFS permissions are set up, BOB can work with his own "remote" documents from both computers (\\A\DocumentsA from computer B and
    vice versa).
    BOB decides to encrypt his documents. So BOB logs in computer A, starts "Manage file encryption certificates Wizard", gets an EFS Certificate from CA and encrypts his c:\Documents (shared as
    \\A\DocumentsA). I assume the EFS certificate is stored on computer A in BOB's local profile, therefore I ask:
    Now, BOB moves to the computer B and logs on.
    Q1: Will be \\A\DocumentsA accessible for BOB from B?
    Q2: If not, what should do now? Should I do something in AD for computer accounts (A and/or B) ?
    Thank you.

  • Why do .ipa files end up in the trash?

    I just got done syncing wirelessly my iPad to my pc to iTunes and there are a bunch of .ipa files in my trash can, I'm curious why they go there and
    if they are safe to delete?

    Because older versions have been undated. The old versions go into the Trash. They are safe to delete.

  • Air iOS - Do .ipa files need obfuscation?

    Hi,
    I published an iPhone app with AIR SDK 14 for the App Store.
    Is the published .ipa file safe from decompilers or should I use a tool like SecureSWF (kindi.com) to encrypt/obfuscate the AS3 source code?
    Thanks

    I'm not 100% but if you've packaged your app using the new (fast) method, then yes, you should obfuscate. The old method was rewriting the bytecode so it was safe(r) from decompilers.

  • Edit Info.plist Within a Published .ipa File to Enable iOS Newsstand Support?

    I'm working on developing a magazine-style app using Flash CS5. I'd like to enable iOS Newsstand support for the exported .ipa file. Anyone have any experience with this? I believe that I'd need to edit the app's info.plist file within the exported .ipa bundle ...
    Experiences / thoughts?
    Ted

    Hi Ted:
    I have not implemented this yet. But as I can read on http://developer.apple.com/library/ios/#documentation/StoreKit/Reference/NewsstandKit_Fram ework/_index.html, editing info.plist might take your app to newsstand but to take advantage of any NewsStand feature  you will also need to write some Native Extension also that provides access to NKLibrary , NKIssue NKAssetDownload.
    I think http://www.viggiosoft.com/blog/blog/2011/10/17/ios-newsstand-tutorial/ this will help you do some newsstand stuff in native code.
    If you ever use newsstand, I would love to see your app, please share your iTunes link.
    best of luck,
    thanks,
    Saumitra

  • .ipa file will install in iTunes and copy to iPhone or iPad but shows as greyed out with "installing" or "waiting" underneath.

    Hey All:
    I have an .ipa file that is legit and "signed" (at least I think so) but for some reason will not work on any device. I basically drag the .ipa file into itunes app section and it will show there as a working app.
    I select the button that says "install" so that when it syncs it puts it on my ipad or iphone. Once I move over to the iphone or ipad the icon is greyed out with the words waiting or installing under the icon.
    Waiting for a half a day at one point before I finally gave up and deleted it from my devices.
    Can someone point me in a direction as to what I might be doing wrong? The only thing I can think is that its' not io7.1 compatable but that is all I got.
    Thanks
    Paul

    I am assuming you where generating the .ipa file using a UniversalDistribution  Provisioning Profile with an iOS Developer Enterprise Account. If so I had the same problem - turned out it was a Certificate issue - what worked for me was when creating the Certificate which I did manually using Keychain Access I left the Common Name field blank and the .ipa installed properly on my devices. Hope this helps.

  • Single Edition - cant create .ipa file

    I have a monthly subscription to the creative cloud, which from what I understand allows me to submit an app (create an .ipa file from InDesign for the App Store) withouth having to purchase a single edition serial number for DPS. I have reached the final stage in the DPS App Builder where I should be able to activate my .ipa file to test, but it is asking for a single edition serial number. I don't see anything downloadable from the creative cloud in this regard, and my InDesign was signed into my Adobe account when I exported my folio.
    I am aware this is the same problem as described in a previous thread: http://forums.adobe.com/message/4786587#4786587 and i have tried those steps to remedy it, but nothing works. As soon as i get to the APP builder it asks me for a single edition serial number.
    I have so far had nothing but trouble since subscribing to the cloud, with conflicting passwords (with previous dps account), unanswered support issues and other things. Please can someone just help me get past this issue with compiling this app.
    For the record I am using InDesign 5.0 (previously owned prior to the cloud subscription), Does this perhaps have a bearing on anything?

    I'm having the same problem. This was the first time that I used the Creative Cloud, and I made the mistake of using the wrong Adobe ID in DPS App Builder. I went through all the steps to the end in the wrong account, and now it is asking for a single edition serial number.
    I then moved the folio to the right Adobe account, but I can't delete it from the first one, and when I try to "create app" in FB, nothing shows up in the App Builder.
    this is a very frustrating experience, and one that I see is common. Why should Adobe staff have to hand-delete the app? Shouldn't I be able to do that?

  • Download IPA files for applications

    We are using MDM software to manage IOS device in organisations. For distributing apps we need .ipa files, Provisioning Profiles and Code signing certificates. Please suggest how can we obtain these for different apps like Lookout, AngryBirds etc.

    If you mean you don't want to distribute your app via iTunes then you need a DPS Enterprise account and an iTunes Enterprise developer account to do private distribution.
    Neil

  • IPA File On iPhone

    Hi All,
    I have been struggling with this all day and am hitting my head against a brick wall. I am a registered iPhone developer.
    My software is on Windows and my app development stuff is on my Mac.
    I created an iPhone project in Flash Pro CS5 (Windows machine running XP), used the Keychain utility to create a p12 from my developer cert on my Mac along with a provisioning file.
    I click Publish, this creates the Flash IPA file.Now what can I do with this?
    I  copy it to my Mac, can see it in iTunes. When I try to copy it to my  iPod I get "The app was not installed on the iPhone <name> because  the signer was not valid"
    I cannot seem to do anything with the file in Xcode, perhaps this is not possible?
    I have been following instructions here:
    http://help.adobe.com/en_US/as3/iphone/WS144092a96ffef7cc-371badff126abc17b1f-7fff.html
    Open the Keychain Access application (in the Applications/Utilities folder).
    If you have not already added the certificate to Keychain, select File > Import. Then navigate to the certificate file (the .cer file) you obtained from Apple.
    Select the Keys category in Keychain Access.
    Select the private key associated with your iPhone Development Certificate.
    The private key is identified by the iPhone Developer: <First Name> <Last Name> public certificate that is paired with it.
    Select File > Export Items.
    Save your key in the Personal Information Exchange (.p12) file format.
    You will be prompted to create a password that is used when you attempt to import this key on another computer.
    Convert an Apple developer certificate to a P12 file on Windows
    To develop iPhone applications using Flash CS5, you must use a P12 certificate file. You generate this certificate based on the Apple iPhone developer certificate file you receive from Apple.
    Convert the developer certificate file you receive from Apple into a PEM certificate file. Run the following command-line statement from the OpenSSL bin directory:
    openssl x509 -in developer_identity.cer -inform DER -out developer_identity.pem -outform PEM
    If you are using the private key from the keychain on a Mac computer, convert it into a PEM key:
    openssl pkcs12 -nocerts -in mykey.p12 -out mykey.pem
    You can now generate a valid P12 file, based on the key and the PEM version of the iPhone developer certificate:
    openssl pkcs12 -export -inkey mykey.key -in developer_identity.pem -out iphone_dev.p12
    If you are using a key from the Mac OS keychain, use the PEM version you generated in the previous step. Otherwise, use the OpenSSL key you generated earlier (on Windows).
    Do I have to install OpenSSL to do this? I have installed OpenSSL and I try the commands above and am receiving an error.
    Are these the steps I need to follow to install my IPA on a device or am I looking in the wrong place? Is there no other way to do this?

    Tim thanks for that, it was going great until about 10 mins into the video where you have to upload your file to Apple to create a developer certificate.
    I can't do that as I have a certificate already so I tried the process here:
    http://help.adobe.com/en_US/as3/iphone/WS144092a96ffef7cc-371badff126abc17b1f-7fff.html
    Which is:
    Convert the iPhone developer certificate to a P12 file on Mac OS
    Once you have downloaded the Apple iPhone certificate from Apple, export it to the P12 certificate format. To do this on Mac® OS:
    Open the Keychain Access application (in the Applications/Utilities folder).
    If you have not already added the certificate to Keychain, select File > Import. Then navigate to the certificate file (the .cer file) you obtained from Apple.
    Select the Keys category in Keychain Access.
    Select the private key associated with your iPhone Development Certificate.
    The private key is identified by the iPhone Developer: <First Name> <Last Name> public certificate that is paired with it.
    Select File > Export Items.
    Save your key in the Personal Information Exchange (.p12) file format.
    You will be prompted to create a password that is used when you attempt to import this key on another computer.
    So I use the certificate to create my app in Flash and import it to iTunes (all goes fine). When I go to install it on the device, I get the error message "The app....not installed...because the signer is not valid".
    One thing I am trying to work out, if I do the process above do I need to use OpenSSL to create a cert signing request or does the Mac developer cert in .p12 form do it all?
    Any other recommendations?

  • Application Loader unable to unzip .ipa file

    I am developing under Flash Professional CS5, working on a PC.  Using the development distribution files, my application builds and I can run it on iPhone, iPad, and iPod.  Now I am trying to get it to the App Store.  I have a distribution certificate which I got before Apple pulled the plug, and was able then to just change the extension to .zip and upload to the App Store (where of course it got stuck until now). This week I rejected my binary in the store, and built an updated version.  You can't just upload to the App Store any more; you need to use the Apple Application Loader. This, of course, only runs on a Mac.  So, I downloaded and installed the latest version on my Mac. transferred the .ipa to a memory stick, and gave it to the Loader.
    I get this curt message    "Unable to unzip application"
    I have tried renaming it to .zip.
    I have tried extracting the Payload and zipping that up again (different error but still no good)
    Has anyone else got any applications built on a PC uploaded recently?  Please tell what you did

    I had almost the same problem. I'm on OS X though. I have my issue solved but it took a lot of trial and error. There were enough clues on this thread though to get me there so thanks everyone. Here's what I went through and what I've discovered:
    I compile with Flash CS5
    (I was trying Christian's way on the commandline but I forget why I couldn't get it to work, must try it again now. ref:
    http://blogs.adobe.com/cantrell/archives/2010/09/packager-for-iphone-refresher.html)
    This creates my .ipa file. I don't know if I need to use the commandline, but I did in order to rename the .ipa file to a .zip file. I then double clicked the .zip in the Finder which unzips it with the default OS X app, not 7 zip or something third party. This produces a folder called Payload. If my swf is set in Flash to publish to Main.swf, then inside Payload I see Main.app
    I zip Main.app by right clicking it in the Finder and select the Compress option, again, default OS X compression stuff.
    This is the correct way to create the ipa file, and produce the kind of zip file that Application Loader wants.
    Along the way, I encountered some other distracting problems. I'll explain those now, but they are not related to the actual ipa/zip/unzip problem.
    I had two errors, one about a bad bundle ID. This was in fact a typo I had by one letter. In my case it was ca.abcd.abcs in iTunes Connect, and in Flash CS5's settings, it was ca.abcd.abc. That was a forehead slapper I tell you.
    The other error was my app not being signed with a proper certificate. I knew I was using my app store certificate, not my dev certificate (this is important btw). I tried revoking my certificate in the app store as @JimmyInteractive mentioned, but I don't think in my case this was necessary. I still had the same issue after revoking. Avoid this if you can because it's a pain in the a$$ to set up all your provisioning profiles again on iTunes Connect and in Keychain, XCode etc. Prior to trying to get everything up onto the app store, I had of course been developing on my personal device, with my developer certificate. What I forgot to do for app store distribution, is in Flash CS5 change Certificate to my app store .p12 file. I still had it set to my dev .p12 file. Doh!
    After I did that and figured out the zipping stuff it all worked. Hope this helps!

  • Creating .ipa file via DPS

    I have a monthly subscription to the creative cloud, which from what I understand allows me to submit an app (create an .ipa file from InDesign for the App Store) withouth having to purchase a single edition serial number for DPS. I have reached the final stage in the DPS App Builder where I should be able to activate my .ipa file to test, but it is asking for a single edition serial number. I don't see anything downloadable from the creative cloud in this regard, and my InDesign was signed into my Adobe account when I exported my folio. Does anyone know how I can resolve this issue? Thanks in advance!

    Check this thread, it's the same problem described above  http://forums.adobe.com/message/4786587#4786587

  • Is it safe to delete the cache file folder from library

    is it safe to delete the cache file folder from library ?

    As I understand it Robo doesn't really 'do' third-party
    source control. We use SourceGear Vault, but really only as a
    repository for the files. We can't really work concurrently because
    Robo needs exclusive access to the top level project files. But it
    kind of works for us, because we're on opposite sides of the globe.
    I see what you're saying on the 'local' versions of (say) the
    cpd files conflicting. If anyone else has an informed view, I'm all
    ears. We've set it up this way ourselves - I don't know of anyone
    doing the same. If someone tells me this is a bad idea, I'm happy
    to think again.
    Cheers!

  • HT204053 iCloud in a business. Do all the computers require the same apple ID to share all the files?? Can i have two apple accounts on one device?

    iCloud in a business.
    Do all the computers require the same apple ID to share all the files?? Can i have two apple accounts on one device

    Neither of those Apps allow you to (easily) add iWork documents created or edited on the device to your online storage, you need to be using a webDAV server to be able to do that. In fact pretty much all you can add from the iOS device is photos and video without resorting to convoluted workarounds, intermediate apps or emailing finished documents to yourself. You can on the other hand view most of the content of dropbox/sugarsync through those apps, which in a lot of circumstances is useful, but without it working in both directions these apps are far from an ideal solution.
    E.g from the sugarsync website
    Yes, this may not be of too much interest to the OP, I was only trying to clarify the situation with iCloud.com/iWork for you.
    However that being said, there may be areas of interest for Computer to Computer syncing, given the recent changes made to iCloud.com/iWork. I wouldn't suggest iCloud sharing for archived documents, but for perhaps up to a couple of dozen documents in progress, iCloud sharing is now quite viable. If there is any chance at all of these documents being accessed on an iOS device then iCloud would become a preferred option to dropbox or sugarsync.

  • How to share a GB file between different computers (using dropbox).

    Me and a friend are trying to share Garageband '09 files using a shared folder with dropbox. He saves a .band file and then saves it to the shared folder. After it loads on my side I open it, but it is empty. Does GB even have this capability? Can it save a file with no dependencies? I do not want to export to mp3 or other format. I am trying to share the actual GB file. I don't want to zip or archive at all. We have the space and the forum for sharing, I just need to know how to save it properly in GB, if GB even has this capability. If not, does Logic Express?

    Robert Leffel wrote:
    Me and a friend are trying to share Garageband '09 files using a shared folder with dropbox. He saves a .band file and then saves it to the shared folder. After it loads on my side I open it, but it is empty. Does GB even have this capability? Can it save a file with no dependencies? I do not want to export to mp3 or other format. I am trying to share the actual GB file. I don't want to zip or archive at all. We have the space and the forum for sharing, I just need to know how to save it properly in GB, if GB even has this capability. If not, does Logic Express?
    You should be able to save the file with no (external) dependencies and share the actual GB file. The .band file is actually a collection of components.
    Why not Save As Archive and Zip it? It might travel better when zipped. It can be unzipped and reconstituted upon receipt.

Maybe you are looking for