4 ms·
>"BlastDoor is a great step, to be sure, but it's pretty lame to just slap sandboxing on iMessage and hope for the best. How about: "don't automatically run ext
by Dah00n 5y ago
>"BlastDoor is a great step, to be sure, but it's pretty lame to just slap sandboxing on iMessage and hope for the best. How about: "don't automatically run extremely complex and buggy parsing on data that strangers push to your phone?!"
https://twitter.com/billmarczak/status/1416801514685796352 https://twitter.com/billmarczak/status/1416801514685796352
- gjsman-1000 5y agoExcept that almost every other secure messenger is guilty of the same thing. And they don't sandbox at all, whereas BlastDoor at least tries to.
- Dah00n 5y agoReally? I have never heard of any "extremely complex and buggy parsing" done by other clients. Do you have a link to info on that?