3 ms·
> I wonder why apple is so hell bent on enforcing Safari/Webkit as the browser engine? security. browsers are famous for escaping their sandbox. this is from
by kmlx 3y ago
> I wonder why apple is so hell bent on enforcing Safari/Webkit as the browser engine?
security. browsers are famous for escaping their sandbox.
this is from November 2023: https://www.theverge.com/2023/11/30/23982296/google-chrome-browser-update-sandbox-escape-exploit-security-vulnerability https://www.theverge.com/2023/11/30/23982296/google-chrome-b...
- realusername 3y agoHistorically, that's also been a huge vector of attack in iOS too. From the old and famous slide to jailbreak to more recent Pegasus.
- yesco 3y agoRealistically support for more than one browser engine is going to increase security in aggregate since it would implicitly decrease the impact of a vulnerability. This has a compounding effect where a zero day for Safari would become less valuable on the black market and therefore become less incentivized to a degree. To give an example: A single Safari engine bug could compromise all iPhones, but if the market share was say 50/50 with Chrome, then the impact of a security vulnerability would now be halved.