4 ms·
I believe now that apps can get the level of info shown in the article it will become a user privacy issue--making it quite closely linked to security.
by josho 11y ago
I believe now that apps can get the level of info shown in the article it will become a user privacy issue--making it quite closely linked to security.
- mikeash 11y agoIf so, then Apple will add restrictions to which apps are able to make these calls, by moving them out of process and adding actual security checks. That's how everything that's actually security-critical (calls that manipulate other processes, filesystem access, hardware access, etc.) already works. If there are any security implications to making a private API call then this implies that Apple's sandboxing system is broken. If so then the solution is to fix the sandbox. Better detection of private API usage might be good for them, but is neither necessary nor sufficient nor particularly useful for security.
- NateLawson 11y agoI agree that enforcement is the best way to go here. Hopefully they will improve the granularity of sandbox control to make detecting private APIs purely a compatibility issue.