top | item 23760398

(no title)

xVedun | 5 years ago

Interesting that even apple apps with the strictest sandboxing by default still has over ten different methods of determining if a jailbreak exists. Now maybe these methods are only useful when a phone is jailbroken, but it seems that this just seems like another way of collecting information.

discuss

order

saagarjha|5 years ago

Many of these methods are probing for whether the sandbox exists and is in effect–on a normal device they will return errors (you tried to access something you shouldn't have) or predictable values (the libraries loaded should just be your own and Apple's) based on the app's execution. The point of such checks is that on a jailbroken device they will unexpectedly succeed due to relaxed policy enforcement or give away information that code execution is occuring. In my opinion most of these should not pass App Store Review. But Apple lets it through regardless…