Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in...
by Dylan16807 on Thursday September 07, 2023 @09:00PM
(#37427910)
> JVM, V8, or even QEMU
> extreme performance drawbacks
That's just not true.
> And media decoders actually ARE sandboxes of sorts. They are designed to interpret media formats, sometimes even Turing-complete bytecode in retrictive and isolated environments. And like any sandboxes, they too have bugs.
It's pretty easy to sandbox a simple bytecode, but that's not the bulk of what a media decoder is doing. A plain old decoder is mostly not sandboxing what it does.
> extreme performance drawbacks
That's just not true.
> And media decoders actually ARE sandboxes of sorts. They are designed to interpret media formats, sometimes even Turing-complete bytecode in retrictive and isolated environments. And like any sandboxes, they too have bugs.
It's pretty easy to sandbox a simple bytecode, but that's not the bulk of what a media decoder is doing. A plain old decoder is mostly not sandboxing what it does.