Apple starts rejecting apps with “hot code push” features

Re:Apple starts rejecting apps with “hot code push” features by marak830 on Wednesday March 08, 2017 @01:11AM (#13818329)

See I do trust that - but only to an extent.

I always wonder when seeing one update, if there is a 0 day that can bypass that. On a technical level I know I run the same risk with my PC, but at the same time, it's more difficult for me to examine processes and startups in my android.

[ Parent | on HN ]

Re:Apple starts rejecting apps with “hot code push” features by lmm on Wednesday March 08, 2017 @05:40AM (#13819369)

Realistically, if they've written their own native code that parses their updates then almost certainly. If they're using an established library then maybe not (likewise if they're using a decent language, but unfortunately no-one does that). I'm reminded of the example at the bottom of http://www.gamasutra.com/view/feature/194772/dirty_game_deve... where the game had a buffer overflow in displaying its own EULA.

[ Parent | on HN ]