3 ms·
One would assume Apple is running the compiler backend in a heavily locked-down container or VM.
by eridius 10y ago
One would assume Apple is running the compiler backend in a heavily locked-down container or VM.
- lern_too_spel 10y agoBut that sandbox has access to all bitcode apps by necessity. That's the whole point — once the bitcode compiler has been owned, all bitcode apps are immediately vulnerable, while compromising non-bitcode apps requires significantly more additional work.
- gpderetta 10y agoWhy would it have access to all apps? It only need access to the app it is currently compiling.
- lern_too_spel 10y agoDepends on how it is implemented. If it is implemented as the GGP described, as a container or VM back end service that compiles multiple apps, that's a problem. That is precisely the type of problem that would only affect bitcode apps that the top post didn't think could exist.