3 ms·
If you can break out the app sandbox on IOS, that is a flaw with IOS. These flaws could be exploited with any app that is using file parsing like the adobe p
by adrr 4y ago
If you can break out the app sandbox on IOS, that is a flaw with IOS. These flaws could be exploited with any app that is using file parsing like the adobe photoshop app.
The jailbreakme app wasn’t exploit on WebKit. It was iOS native pdf rendering Library. WebKit was used to deliver the exploit.
- babypuncher 4y agoThat is not a fair comparison. An entire browser engine has way more surface area for attack than a JPEG decoder.
- adrr 4y agoIt was just an example. What about a pdf editor/viewer like acrobat?
- babypuncher 4y agoStill far less attack surface area than a browser engine. Browsers can download and execute arbitrary code in the form of JavaScript or WASM. Your options for poking at the sandbox are far more plentiful when it is parsing and executing turing-complete instructions rather than a markup languages or other static data.