3 ms·

Most of the features of this lockdown mode should be on by default.

• egberts1 4y ago
  ESPECIALLY the disabling of JavaScript, because … malicious JacaScript.
  • phoe-krk 4y ago
    This does not seem to disable JS altogether, only JS JIT compilation. IIUC, JS will still be executed, although via an interpreter (which is safer) rather than via compiled machine code (which might be used to exploit memory safety bugs such as type confusion, somewhat frequent on the JS side).
    • egberts1 4y ago
      which in my cybersecurity book is considered a “miss”.
      • Nextgrid 4y ago
        FYI, if you mean that it should disable JS completely then you can already do that in Settings -> Safari.
• jimt1234 4y ago
  Totally agree. I'm also concerned about the fine print, what Apple is not announcing - like, "Oh, we also updated our EULA to reflect that metadata from phones with 'lockdown mode' enabled will be forwarded to the FBI", something like that.