5 ms·
Feels like this app alone make ipadOS more usable than all the past effort from Apple combined.
by magnio 2y ago
Feels like this app alone make ipadOS more usable than all the past effort from Apple combined.
- idle_zealot 2y agoDon't get too excited. It's the SE "Slow Edition." Apple won't let apps access JIT acceleration, let alone the iPad's virtualization capabilities, so this is all interpreted and barely usable.
- walterbell 2y agoBaby steps :) We know that recent (M2+) Apple Silicon has hardware support not only for virtualization, but nested virtualization. Time may improve Apple's risk/reward for enabling virtualization in specific iPad use cases. Thanks to aShell and iSH emulators for pioneering Linux-alike experiences on iPads, at the cost of overheated silicon. Thanks to Asahi for bare-metal Linux, including virtualization, on Apple Silicon.
- EMIRELADERO 2y ago> Time may improve Apple's risk/reward for enabling virtualization in specific iPad use cases. It's more likely that the EU will improve it. As things stand today, Android allows for JIT acceleration on all apps, essentially unrestricted. The DMA only allows for security measures that restrict APIs insofar as those measures are "strictly necessary and proportionate". Since Android manages just fine on that front with full JIT, Apple's defense relying on that DMA exception will fail.
- throwaway3306a 2y agoSo why does my android phone not allow sudo or chroot, and when I root it my bank application stops working, citing the EU payment service regulations? Virtualization is not enabled too, even though the cpu supports it.
- walterbell 2y agoRecent Pixel devices support Android pKVM nested virtualization, with optional 2-way isolation, https://android-developers.googleblog.com/2023/12/virtual-machines-as-core-android-primitive.html https://android-developers.googleblog.com/2023/12/virtual-ma... Even if Android is compromised all the way up to (and including) the host kernel, the isolated VM remains uncompromised This allows virtualized Linux VMs on supported Pixels, running alongside Android, https://www.xda-developers.com/nestbox-hands-on/ https://www.xda-developers.com/nestbox-hands-on/ & https://www.esper.io/blog/android-dessert-bites-13-virtualization-on-pixel-6-379185 https://www.esper.io/blog/android-dessert-bites-13-virtualiz...
- diffeomorphism 2y agoWhen will that come to non-Pixel devices?
- walterbell 2y agoPossibly when Qualcomm brings Oryon (with silicon support for nested virtualization) from laptops to smartphones in late 2024, https://www.androidauthority.com/qualcomm-snapdragon-oryon-cpu-2024-3378729/ https://www.androidauthority.com/qualcomm-snapdragon-oryon-c... & https://www.qualcomm.com/developer/blog/2024/01/gunyah-hypervisor-software-supporting-protected-vms-android-virtualization-framework https://www.qualcomm.com/developer/blog/2024/01/gunyah-hyper... > we have replaced pKVM with Gunyah Hypervisor Software – our own, more versatile hypervisor – on our Qualcomm Technologies’ chipsets. With Gunyah, we can use one hypervisor across use cases as varied as automotive, mobile broadband, IoT and wearables. We’ve upstreamed Gunyah for general use by the Android community.
- Xeamek 2y agoChroot works fine though
- throwaway3306a 2y agoNo, it doesn't. It requires root, and that breaks all the apps.
- sunshinerag 2y ago"... Since Android manages just fine on that front with full JIT" How do we know this? No vulnerabilities/exploits reported using these?
- cqqxo4zV46cp 2y agoThere’s a reason that you’re falling back on imprecise language: “manages just fine”. That is not sufficient ground to responsibility implicate this regulation. There’s an obvious reasonable security argument for Apple to make here. To say otherwise is just letting this stupid OS war get in the way of any actual engineering competency you may have. Be fair.
- meiraleal 2y agoYou aren't really being fair by letting a multitrillion dollar company get away with such a simple excuse
- coldtea 2y ago>Android manages just fine on that front with full JIT Is this the same Android that has a 5x+ share of malware compared to iOS?
- r0ks0n 2y agohow much of that malware do you think actually uses the jit?
- deleted 2y ago[deleted]
- Zigurd 2y agoI'd be interested to see how much of that malware targets and is effective on big OEMs' devices using Google Mobile Services compared with non-GMS Androids mainly in the China domestic market. In principle the non-GMS devices can be just as secure, but in fact do they give privileged access to vulnerable code?
- isodev 2y agoEven for apps in 3rd party storefronts? I always thought these rules are somewhat relaxed for external publications but perhaps I was mistaken. It’s not like we have proper “side loading” yet.
- idle_zealot 2y agoThese restrictions are enforced by the OS, not Apple's store rules. Even in the EU sideloaded apps can't do these things. It remains to be seen if their hands will eventually be forced, my understanding is that the EC is still working on striking down the Core Technology Fee, and these battles are going to take a while to catch each and every way Apple is trying to retain control of people's phones.
- rbits 2y agoYeah. Even using sideloading before the EU stuff you couldn't use JIT. Altstore (not the EU version) managed to get it working I think, but it was very finicky and I think it doesn't work in newer versions of iOS
- Kwpolska 2y agoJIT will only be allowed for alternate web browsers in the EU.
- idle_zealot 2y agoIf Apple loses the notarization battle then that's impossible. Any app that wants it would be able to request the relevant privileges.
- dartharva 2y agowhat's the reason behind being that restrictive?
- zerr 2y agoApp store monopoly.
- dartharva 2y agoYeah but still, why would you restrict apps for no genuine reason?
- truckerbill 2y agoIf theres a question the answer is usually money in America... Things they see as problems: Reducing need for MacBooks, Virtualised app-stores that use creative accounting or some other trick to circumvent apple tax, True free-software culture on their platform, Lack of control re privacy / data collection / platform guidelines / software publishing, DRM circumvention...
- walterbell 2y agoWith nested virtualization, iOS DRM/appstore VM can be safely isolated from OSS VMs.
- tgv 2y agoUsable? In what sense? Not in the normal sense of the word. Because if it wasn't usable, very few would own an iPad. Instead, only a few care about running linux.