3 ms·
"We're trying to ship a system-wide permission lockdown, but we ran into unforeseen complications that will require more than a single release cycle to properly
by jjoonathan 7y ago
"We're trying to ship a system-wide permission lockdown, but we ran into unforeseen complications that will require more than a single release cycle to properly address. Instead of holding up the entire rollout for a release cycle, we'll ship the lockdown today and most users will benefit from it, but users that would otherwise run into the complications get a permissive bypass. Once the infrastructure to address the complications is in place, we'll get the lockdown working for them as well."
- jerf 7y agoThe near-complete inability to revert the permission is what argues against this. You could get this past a security team if you had the ability to revert it and Apple could document it away. It is the fact that it is a non-revertible thing (in any reasonable manner) that is the key here. The odds that there's some way to chain this in an interesting way are just too high, even if the security team couldn't immediately come up with it.