Re:Temptation of the Apple: Dolphin on macOS M1
by gbanfalvi on Monday May 24, 2021 @06:41PM
(#27270540)
I can guarantee you that the sandbox can be circumvented if you can just run an IPA on the device. iOS has a humongous set of APIs and that attack surface is impossible to protect properly.
Don’t get me wrong, I’d love to have an iPhone I can install anything on - but there is _no_ way I would ever install anything from the open internet on the same device use to read my email or log in to my bank.
iOS malware authors tend to publish their binaries as unsigned dylibs and don't need Apple ID accounts so they aren't even banned when they're caught. instead they convince other developers to ship it in seperate apps (there are various ways, money, convenient APIs, both in the case of Facebook.)