News for hackers. Stuff that matters.

A comment on Bitcode (iOS, watchOS). Parent comment

Re:Bitcode (iOS, watchOS) by omarforgotpwd on Tuesday June 09, 2015 @04:30AM (#9684630)
Apple has a pretty complex boot system in which each stage of the boot process verifies a checksum of the next layer before starting it up. The lowest layer is etched in ROM. Theoretically, if you verify the integrity of the bitcode, and you verify the integry of the bitcode compiler, you should be able to trust the native binary as well.
[ Parent | on HN ]
Re:Bitcode (iOS, watchOS) by ge0rg on Tuesday June 09, 2015 @04:38AM (#9684656)
Apps you upload to iTunes Connect that contain bitcode will be compiled and linked on the App Store.

Unless the description is wrong, this looks like Apple could insert any code they want into your binary, without your users noticing.

[ Parent | on HN ]
Re:Bitcode (iOS, watchOS) by jonhohle on Tuesday June 09, 2015 @09:05AM (#9685632)
As others have pointed out - which they can do anyway because they own the entire operating system and application runtime.
[ Parent | on HN ]