An Interest In:
Web News this Week
- April 20, 2024
- April 19, 2024
- April 18, 2024
- April 17, 2024
- April 16, 2024
- April 15, 2024
- April 14, 2024
Some of Our Sources
- Slashdot
- Technology Review
- TutsPlus - Code
- The Logo Smith
- Fuel Your Creativity
- My Ink Blog
- Web Design Ledger
- Stylized Web
- Codrops
- Hashedout
Help Webnuz
Referal links:
January 30, 2016 02:00 pm
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/xGEafOMQ0vY/ios-app-update-technique-puts-users-at-risk
iOS App Update Technique Puts Users At Risk
itwbennett writes: An increasing number of iOS application developers use a technique that allows them to remotely modify the code in their apps without going through Apple's normal review process, potentially opening the door to abuse and security risks for users. An implementation of this technique, which is a variation of hot patching, comes from an open-source project called JSPatch. After adding the JSPatch engine to their application, developers can configure the app to always load JavaScript code from a remote server they control. This code is then interpreted by the JSPatch engine and converted into Objective-C. 'JSPatch is a boon to iOS developers,' security researchers from FireEye said in a blog post. 'In the right hands, it can be used to quickly and effectively deploy patches and code updates. But in a non-utopian world like ours, we need to assume that bad actors will leverage this technology for unintended purposes.'Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/xGEafOMQ0vY/ios-app-update-technique-puts-users-at-risk
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot