3 ms·

Apple disables JIT on Safari in high security mode. Apple knows that no browser can be secure when using JIT.

rektide 4y ago
This is a pretty big claim. It's not that the browser can't be secure. It's that Apple might not have total control & oversight over what is executing. And that Apple won't pursue further to find out: they just make their job easy for themselves by arbitrarily saying all code that runs must be reviewable in the app store. That's not a mark on other people's JIT engines: it's a mark on Apple's willingness to understand/pursue/investigate. At great cost to the consumer, in this case. I don't want to be slanted in only one direction, so let me share the other side of the coin: in the new Web Extensions spec that Google has built from the ground-up by fiat (mv3), they too ban dynamic code of any kind: all code must be built in to the extension. And the extension can't be any kind of virtual machine, can't execute any kind of programmatic system within itself. Because Google too is a murderous shitty coward that hates the world, that hates potential, that wants to limit freedom, that curbs what is possible, under exactly the same premises of being for our security, but which also obstructs massive classes of very basic very simple very generic software that poses a threat to these sizable corporations ability to stay in absolute control. Generally I'm pretty ok with Google's behavior, but this particular vicious turn of events deeply deeply against the web & possibility makes me lower them to the same low dog piece-of-shit fuckwad coward shitsmear con-man that I have long seen as a fairly distinclty Apple low lying cowardice. For your protection is a vicious piece of shit lie, and end of basic liberty. Shame, you vicious piece of shit fucks, shame!! You call it security, but you are just not willing to actually do the work to understand or look at & investigate: you make an easy fiat rule that excludes countless valid & good uses, because it makes your life easy & benefits your systems of control, lowers user-agency. It's directly agains the end-user, and yet they say it's for our benefit: this is the worst kind of lie.
- scarface74 4y ago
  So I’m sure you know of a large piece of software that is totally secure and has never had security issues?

This is a pretty big claim. It's not that the browser can't be secure. It's that Apple might not have total control & oversight over what is executing. And that Apple won't pursue further to find out: they just make their job easy for themselves by arbitrarily saying all code that runs must be reviewable in the app store. That's not a mark on other people's JIT engines: it's a mark on Apple's willingness to understand/pursue/investigate. At great cost to the consumer, in this case. I don't want to be slanted in only one direction, so let me share the other side of the coin: in the new Web Extensions spec that Google has built from the ground-up by fiat (mv3), they too ban dynamic code of any kind: all code must be built in to the extension. And the extension can't be any kind of virtual machine, can't execute any kind of programmatic system within itself. Because Google too is a murderous shitty coward that hates the world, that hates potential, that wants to limit freedom, that curbs what is possible, under exactly the same premises of being for our security, but which also obstructs massive classes of very basic very simple very generic software that poses a threat to these sizable corporations ability to stay in absolute control. Generally I'm pretty ok with Google's behavior, but this particular vicious turn of events deeply deeply against the web & possibility makes me lower them to the same low dog piece-of-shit fuckwad coward shitsmear con-man that I have long seen as a fairly distinclty Apple low lying cowardice. For your protection is a vicious piece of shit lie, and end of basic liberty. Shame, you vicious piece of shit fucks, shame!! You call it security, but you are just not willing to actually do the work to understand or look at & investigate: you make an easy fiat rule that excludes countless valid & good uses, because it makes your life easy & benefits your systems of control, lowers user-agency. It's directly agains the end-user, and yet they say it's for our benefit: this is the worst kind of lie.

scarface74 4y ago
So I’m sure you know of a large piece of software that is totally secure and has never had security issues?