4 ms·
In notarization rules, no executable code download is allowed
by moffatman 3y ago
In notarization rules, no executable code download is allowed
- kevincox 3y agoBut they say that browser engines are allowed. So can they JIT?
- tech234a 3y agoYes
- kevincox 3y agoHow can the OS tell the difference between downloading JavaScript and JITing it vs downloading compiled code and running it?
- post_break 3y agoThey look into the app as a human vs looking at the code. iDOS 2 is a great example. Banned for doing that exact thing.
- kaba0 3y agoAn App is not just code, it is an entity within the OS with permission system, metadata etc all attached to it. A JIT compiler is not above the App’s sandbox permissions.
- riscy 3y agoWhether runtime generated or downloaded from the internet, you cannot run instructions directly on the processor without requesting executable virtual pages in memory from the OS. Executable pages are also a major security vulnerability: https://en.wikipedia.org/wiki/JIT_spraying https://en.wikipedia.org/wiki/JIT_spraying