undefined | Better HN

0 pointsthekingofh6y ago0 comments

I think you mean that you can have interpreted javascript, just not JIT compilers. They don't allow you to mark memory as executable. That syscall is completely disabled on their systems.

0 comments

saagarjha6y ago

It is not, moprotect (and mach_vm_protect) work just fine if you have the appropriate entitlements or have a way of getting around its checks.

thekingofhOP6y ago

I think the entitlements are not offered to apps such as firefox and those that are not Apple correct?

saagarjha6y ago

Some of them are, but they cannot be used with apps delivered on the App Store.

vbezhenar6y ago

It can't be disabled because Safari and Webkit uses JIT for JavaScript. Probably it's enabled for apps signed by Apple.

thekingofhOP6y ago

True it is disabled if you aren't Apple.

j / k navigate · click thread line to collapse

0 pointsthekingofh6y ago0 comments

I think you mean that you can have interpreted javascript, just not JIT compilers. They don't allow you to mark memory as executable. That syscall is completely disabled on their systems.

0 comments

saagarjha6y ago

It is not, moprotect (and mach_vm_protect) work just fine if you have the appropriate entitlements or have a way of getting around its checks.

thekingofhOP6y ago

I think the entitlements are not offered to apps such as firefox and those that are not Apple correct?

saagarjha6y ago

Some of them are, but they cannot be used with apps delivered on the App Store.

vbezhenar6y ago

It can't be disabled because Safari and Webkit uses JIT for JavaScript. Probably it's enabled for apps signed by Apple.

thekingofhOP6y ago

True it is disabled if you aren't Apple.

j / k navigate · click thread line to collapse