3 ms·
Interesting! I had assumed that if you could mark pages of memory as executable (for a JIT), that an app could use that to call all sorts of security/privacy se
by varenc 3y ago
Interesting! I had assumed that if you could mark pages of memory as executable (for a JIT), that an app could use that to call all sorts of security/privacy sensitive private APIs they're usually forbidden from using. But maybe not? Or is iOS sandboxing just good enough it doesn't matter? (but at the minimum, it does still seem to nullify the app store review process if apps can introduce arbitrary new behavior/code after review)
- saagarjha 3y agoYou can do that anyways (i.e. by obfuscating the call so that review doesn’t find it). The sandbox (+entitlements) is supposed the be the actual security boundary here. A JIT makes bypassing review easy which is why they don’t like it but bypassing review is pretty easy already just by writing your code in JavaScript and downloading it from the internet so there’s not much technical merit to the policy.