alt Hacker NewsWhy can't Apple just sandbox the damn thing? Run the renderer in a VM, call it a day.
Or just spend a few billion tokens rewriting the whole chain in a memory safe language. This nonsense is inexcusable in 2026
Replies
ylk • today at 9:36 AM
It's sandboxed, not in a VM but using the *OS sandbox/seatbelt. Running all renderers in a separate VM on a consumer phone sounds like a terrible time when you need to stay competitive regarding performance, responsiveness, etc.
iririririr • today at 5:33 AM
it offers just enough cover and deniability. Q.e.d this sub thread.
it's a feature. expect next exploit to also be pdf or image related.
sneurlax • today at 3:53 AM
The sandbox is just another layer
I sincerely believe you need much more than one billion tokens to rewrite the entire PDF dependency stack in a memory safe language. I think you underestimate how many features PDF has.