4 ms·
What protects an ios user from a malicious app? Just the agreement the app developer made with apple?
by postalrat 4y ago
What protects an ios user from a malicious app? Just the agreement the app developer made with apple?
- Spivak 4y agoSorta kinda, iOS apps are jailed using all the normal stuff you might find in a hardened Linux distribution but there isn't a system in the whole wide world that is confident that these kinds of jails are sufficient to safely run arbitrary untrusted code. This is half the reason Firecracker exists on Linux because containerization just isn't enough. Hence why it's only allowed to run actually sandboxed in the JavaScript VM and even then the JIT makes it not airtight. This is how past Jailbreak exploits worked. Like we're talking about code running in a VM completely isolated from the host system but has one teeeeny tiny escape hatch, a single WX page used by the JIT and that has been exploited multiple times.