News for hackers. Stuff that matters.

A comment on Apple considering dropping requirement for iPhone web browsers to use WebKit. Parent comment

Re:Apple considering dropping requirement for iPhone web bro... by lotsofpulp on Wednesday December 14, 2022 @01:46PM (#33988017)
I exclusively use Safari for better battery life and I trust their security more and anticipate I will be using Keychain for a long time.
[ Parent | on HN ]
Re:Apple considering dropping requirement for iPhone web bro... by mhoad on Wednesday December 14, 2022 @03:19PM (#33989804)
You should probably read the security section of any iOS release notes sometime. Great at security isn’t the first thing that comes to mind for me.

Here’s the latest one for example: https://support.apple.com/en-gb/HT213530

[ Parent | on HN ]
Re:Apple considering dropping requirement for iPhone web bro... by theshrike79 on Wednesday December 14, 2022 @04:00PM (#33990476)
So fixing security issues is ... bad?
[ Parent | on HN ]
Re:Apple considering dropping requirement for iPhone web bro... by mhoad on Wednesday December 14, 2022 @04:12PM (#33990641)
FFS… nobody said that. Nobody even implied that.
[ Parent | on HN ]
Re:Apple considering dropping requirement for iPhone web bro... by lern_too_spel on Wednesday December 14, 2022 @05:24PM (#33991530)
If Chrome can update itself in the App Store without a reboot like it does on Android, and Safari continues to require an OS update, Safari security will continue to be worse.
[ Parent | on HN ]
Re:Apple considering dropping requirement for iPhone web bro... by Aaron2222 on Wednesday December 14, 2022 @07:15PM (#33992975)
Rapid Security Response should fix that.
[ Parent | on HN ]
Re:Apple considering dropping requirement for iPhone web bro... by acdha on Wednesday December 14, 2022 @04:05PM (#33990533)
iOS release notes combine the OS, apps, and dependent libraries. If you compare to Chrome or Firefox on Windows or Android it's pretty hard to say that anyone has this solved other than to the extent that they're migrating to memory-safe languages. I think Chrome is a ahead on proactive mitigations but from a user's perspective it's basically a never-ending race to install updates since they all have high CVEs on a regular basis.
[ Parent | on HN ]