Hacker News new | past | comments | ask | show | jobs | submit
motoboi | on: Today, we hacked what we'd set out to hack: the iPhone
Too huge attack surface. Good candidate for victim trust (who would not open a pdf file on an iPhone?).

So pdf and images are the best vector for iPhones.

Once you escape the parser you have to reach and escape the sandbox and from there reach the kernel.

anthk | parent
That's why you need Rust in any image decoder. FFMPEG too.
steve1977 | root | parent | next
Apple has been propagating Swift for more than a decade now and at least in theory, it should be on par with Rust in terms of safety I'd say.
loading story #50215171
frizlab | root | parent
It mostly is. Has pretty much caught up with all of rust actually (while being much more readable).
OptionX | root | parent | next
The problem here is that pdf is over bloated with features and without strictly defined standard. Rust can't help you with that, or any language for that matter. It's akin to upgrading the security system on a house on fire.

The best solution would be ditching it completely for a simpler subset of features. But that will never happen.

NetMageSCW | root | parent
Rust is not a magic security wand.
loading story #50213457
loading story #50219387
loading story #50218608
loading story #50214807
loading story #50215429
loading story #50213505