Haha, indeed it does.

Anyway, I think a simple workaround is if you've jailbroken your phone and you want to use an illegal app, you'd just edit /etc/hosts and for iphone-services.apple.com route to 127.0.0.1 until a patch is worked around.

Kudos to Jason for the suggested workaround, but here are my thoughts:

iPhone Atlas isn't linking directly to Zdziarski's original comments, but I'm seeing all over Google that he found this URL string deep within the CoreLocation framework.

Um...isn't anyone even entertaining the notion that this "blacklist" is set up specifically to disallow rogue applications from using CoreLocation? Kinda stands to reason, eh? The truth of the matter is, there's a LOT of potential for location-aware applications to do Bad Things without much—if any—indication to the end-user (meaning, Apple could inadvertently allow malware into AppStore). I see no evidence at all that this is linked to "remotely deleting your applications."

I just think people are jumping to some really quick conclusions, and there's enough shadow of doubt that I'm not inclined to point the "insidious" finger yet.

They do. Their CRL is at http://crl.microsoft.com/pki/crl/products/CodeSignPCA2.crl

Windows grabs it on startup.

What are you talking about? Do you even know what a CRL is? It has nothing to do with what we are taking about, Microsoft is only going to sign MS applications - not some random 3rd party. On top of that you can disable the CRL checking if you don't care.

Look, I don't use MS products so I'm not shilling for them and Apple puts the dinner on my plate so I certainly am a fan, but if I bought a piece of hardware, I don't want anyone else's hands messing around inside of it. It's mine, stay the F**k out.

You obviously haven't seen some of the available apps...

No, WGA does not disable third party applications. Having the ability to kill your own pirated software is one thing (of which we are not arguing here), killing third-party apps is another.

There's no possible way the cows can escape the pasture. We don't need any plans to get them back if they do.

Oh hey, a tornado took out the fence. Guess we're screwed.

Same flawed logic. Look at the privacy issues we've already run into, with Aurora Feint, and the SMS spam from Loopt. Apple doesn't get the source to submitted apps, they get compiled binaries. If someone wanted to be truly malicious, they could cleverly hide something and set it off later.