7 ms·
Yes, but with JIT, you can't really verify what the application does upfront. That is the entire point.
by asdfsa32 25d ago
Yes, but with JIT, you can't really verify what the application does upfront. That is the entire point.
- deleted 25d ago[deleted]
- pjmlp 25d agoCapabilities are a way to control that, and the point being that only responsible proven applications get the certificate, hence how it all goes on iOS.
- asdfsa32 25d agoYou're making the assumption that "responsible" is something provable, but that is not the case, it is specially not easy to prove software is secure from tampering its behaviour.
- pjmlp 25d agoFor that there is bytecode verification as intermediate step, and if you want to go crazy with security, hardware memory tagging with capabilities. Which at this point most companies would rather save money and forbid JIT altogether. Note that mainframes and micros have JIT environments that aren't at the same safety level as regular desktop PCs. For example, https://medium.com/@dhemanthc/ibm-i-architecture-how-timi-and-slic-enable-hardware-independence-82aea3f2dae3 https://medium.com/@dhemanthc/ibm-i-architecture-how-timi-an...