Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Run dedicated iOS Simulators in the browser

appetize.io

Post reply on HN
Print view View original

61–69 of 69 posts

Re: Show HN: Run dedicated iOS Simulators in the browser

#61

Post by userbinator »

niutech wrote: post #59
userbinator wrote: post #57

Earlier quoted context omitted.

base64 encoded JPEGs MJPEG is supported in all browsers I know of, and would cut down on bandwidth by 33% over base64. (If you really want to use WebSockets, a more dense encoding than base64 could also help - look into base85, for example.)

MJPEG is good, but keep in mind that Chrome doesn't support playback of MJPEG streams as a main resource, it has to be in an tag.

Looks like that functionality used to be there, was broken, fixed, and then broken again sometime later. The latest bug for it appears to be https://code.google.com/p/chromium/issues/detail?id=308999

For this application you'd need it to be in an tag anyway since there's the other stuff on the page too, so that's a moot point.

Re: Show HN: Run dedicated iOS Simulators in the browser

#63

Post by chrisnolet »

shortstuffsushi wrote: post #53
kaivi wrote: post #46

Well, this is cool, but Safari allows for loading basically any file located on the filesystem. For instance, trying file:///etc/passwd results in file found but can not be opened by Safari. That could be an attack vector.

Could you explain where you think the issue here is? Are you saying, as a user trying to upload, you could possibly (presumably accidentally) upload your passwd, or as a user of their site, you could somehow see their passwd file? If it's the former, I think that's a 'vulnerability' with any site that has a file chooser. If it's the latter, could you elaborate where and how you would do so? Perhaps you're saying you…

Simulator instances aren't sandboxed, so you can transverse the master system's file system with a malicious iOS app. This is indeed an attack vector.

Re: Show HN: Run dedicated iOS Simulators in the browser

#64

Post by chrisnolet »

gurkendoktor wrote: post #60
phmagic wrote: post #20

I'm not sure what problem this solves but it's technically cool.

You can let users play around with your paid app to see if it works as expected. Certainly cleaner than messing with In-App-Purchases or a separate "Lite" version of your app. I've heard in one episode of the Core Intuition podcast that Panic has actually spent some time polishing a simulator build of Transmit(?) for iOS, for use with app.io (a service which did the same thing as the OP until they pivoted). This is s…

It was a demo of Panic's DietCoda! It was running for a while but I think it's been taken down now (since App.io's pivot maybe).

Re: Show HN: Run dedicated iOS Simulators in the browser

#65

Post by niutech »

userbinator wrote: post #61
niutech wrote: post #59

Earlier quoted context omitted.

MJPEG is good, but keep in mind that Chrome doesn't support playback of MJPEG streams as a main resource, it has to be in an tag.

Looks like that functionality used to be there, was broken, fixed, and then broken again sometime later. The latest bug for it appears to be https://code.google.com/p/chromium/issues/detail?id=308999 For this application you'd need it to be in an tag anyway since there's the other stuff on the page too, so that's a moot point.

Not only . The MJPEG stream could theoretically be embedded in an , thus being affected by this bug.

Re: Show HN: Run dedicated iOS Simulators in the browser

#66

Post by shortstuffsushi »

chrisnolet wrote: post #63
shortstuffsushi wrote: post #53

Earlier quoted context omitted.

Could you explain where you think the issue here is? Are you saying, as a user trying to upload, you could possibly (presumably accidentally) upload your passwd, or as a user of their site, you could somehow see their passwd file? If it's the former, I think that's a 'vulnerability' with any site that has a file chooser. If it's the latter, could you elaborate where and how you would do so? Perhaps you're saying you…

Simulator instances aren't sandboxed, so you can transverse the master system's file system with a malicious iOS app. This is indeed an attack vector.

Huh, indeed they are not. Was able to pull a file off my desktop through Safari. Was not aware of that.

Re: Show HN: Run dedicated iOS Simulators in the browser

#67

Post by weiyin »

chrisnolet wrote: post #51
daveytea wrote: post #50

Earlier quoted context omitted.

As previously the Head of BD at App.io, I applaud your efforts! Well done! Quite a few ways you can monetise, good luck! :)

Likewise!! Well done guys. Great to see you've grabbed the torch. Good luck and I look forward to following your progress.

Thanks, it means a lot to us coming from you guys!

Re: Show HN: Run dedicated iOS Simulators in the browser

#68

Post by weiyin »

kaivi wrote: post #46

Well, this is cool, but Safari allows for loading basically any file located on the filesystem. For instance, trying file:///etc/passwd results in file found but can not be opened by Safari. That could be an attack vector.

Agreed. This is an issue not just for Safari, but someone can upload a specially crafted app that browses the file system.

In this iteration we are using the OS permission system to isolate users. We are looking into more effective sandbox methods. Security is an ongoing process, and we always take an adversarial point of view when evaluating our system.

Re: Show HN: Run dedicated iOS Simulators in the browser

#69

Post by chrisnolet »

weiyin wrote: post #67
chrisnolet wrote: post #51

Earlier quoted context omitted.

Likewise!! Well done guys. Great to see you've grabbed the torch. Good luck and I look forward to following your progress.

Thanks, it means a lot to us coming from you guys!

Can't wait until you figure out h.264 and the MediaSource API ;) You guys are moving at an incredible pace! Very impressed.

ps. I love the new /embed endpoint and iPad support. Keep it coming!

Post reply on HN