2 ms·

A couple of things to note here. Firstly, this is not a webkit-specific problem - It's just that webkit is the most commonly embedded browser engine. I have p

A couple of things to note here. Firstly, this is not a webkit-specific problem - It's just that webkit is the most commonly embedded browser engine. I have personally jailbroken my LG smart TV using a V8 n-day exploit (details not public, yet). For any modern browser engine that is left unpatched, it is only a matter of time before it can be exploited using publicly-available techniques - and console manufacturers know this. Which leads me to my second point: Console manufactuers assume that the browser will be compromised, and sandbox it appropriately. It is not a meaningful security boundary, by design. Exploiting the browser on a console, on its own, doesn't get get you very far. You'll need to chain it with additional exploits (a sandbox escape, a kernel exploit, etc.) to do something useful.

smoldesu 4y ago
So... theoretically there is no security disadvantage to using Blink as your render engine instead of Webkit, as long as they're running the in the same sandbox? If that's really the case, then it's even more bizarre that Apple stands by their security statement.
- Retr0id 4y ago
  The console threat model is far too different to the mobile device threat model for any direct comparison. Console users will deliberately withhold security updates, so that they can later hack their devices. Console security updates protect the vendor from their users. Mobile users (who care) will always be on the latest updates. Fresh browser exploits are exponentially more expensive, generally speaking. Allowing users to use different browser engines doesn't necessarily widen the remote attack surface, it just changes it. But yes, ultimately I think Apple cares more about losing their walled garden, than they do about security.
alickz 4y ago
>I have personally jailbroken my LG smart TV using a V8 n-day exploit (details not public, yet). What have you done with your jailbroken TV? I was considering jailbreaking my LG Smart TV too as I _hate_ the Home screen with a passion and was hoping to replace it. But I use the Game Mode all the time, so I was hesitant to jailbreak in case that interfered. I'm just curious why you've jailbroken yours and whether or not I should.

smoldesu 4y ago

So... theoretically there is no security disadvantage to using Blink as your render engine instead of Webkit, as long as they're running the in the same sandbox? If that's really the case, then it's even more bizarre that Apple stands by their security statement.

Retr0id 4y ago
The console threat model is far too different to the mobile device threat model for any direct comparison. Console users will deliberately withhold security updates, so that they can later hack their devices. Console security updates protect the vendor from their users. Mobile users (who care) will always be on the latest updates. Fresh browser exploits are exponentially more expensive, generally speaking. Allowing users to use different browser engines doesn't necessarily widen the remote attack surface, it just changes it. But yes, ultimately I think Apple cares more about losing their walled garden, than they do about security.

alickz 4y ago

>I have personally jailbroken my LG smart TV using a V8 n-day exploit (details not public, yet). What have you done with your jailbroken TV? I was considering jailbreaking my LG Smart TV too as I _hate_ the Home screen with a passion and was hoping to replace it. But I use the Game Mode all the time, so I was hesitant to jailbreak in case that interfered. I'm just curious why you've jailbroken yours and whether or not I should.