3 ms·

How is JIT relevant here? We're talking about removing homescreen shortcuts to PWAs. This doesn't limit JIT in any way.

• 0x457 3y ago
  Home screen shortcuts have larger sandbox. JIT is a large attack surface because of how JIT works. When there is only browser - Apple can easily push an emergency patch. With 3rd party browsers this isn't possible.
  • SkiFire13 3y ago
    > JIT is a large attack surface because of how JIT works. From the point of view of the OS, a 3rd party application using JIT can't do anything more than a 3rd party application not using JIT, which Apple have to allow anyway. And still it's laughable that the only "mitigation" Apple found was to remove a feature that most people didn't even know about (because Apple made it difficult to even access in the first place!). That surely will have an impact on the security of the 2 people that knew about that feature. By the way, why isn't MacOS so insecure if it allows all sorts of 3rd party apps, with or without JIT, and even allow apps creating shortcuts on the desktop themselves? > When there is only browser - Apple can easily push an emergency patch. With 3rd party browsers this isn't possible. Lot of people don't immediately apply OS updates, and Safari is part of the OS so it cannot be updated in other ways. 3rd party browsers instead can be very quickly updated like any normal apps without even requiring a reboot of the OS. It seems to me that a competent 3rd party app has a better security model than Safari.