Apple accepts Javascript in EPUB ebooks in iBookstore
21–30 of 34 posts
Re: Apple accepts Javascript in EPUB ebooks in iBookstore
#22Earlier quoted context omitted.
So my ebooks can now contain executable root kits. Cool.
Javascript is pretty well jailed up, you can't communicate with local and remote files in the same javascript file.
If my document reader can execute any code in any language, then any document that I read has the potential to execute malicious code on my computer, and I now have an exploit vector that I need to consider when downloading documents & opening e-mail attachments.
I understand that the code can be sandboxed, but before I implicitly trust the sandboxing technology, I'd have to see an example of an unexploitable sandbox. I don't know of any - but that doesn't mean they don't exist.
Re: Apple accepts Javascript in EPUB ebooks in iBookstore
#23Earlier quoted context omitted.
That sort of protection has nothing to do with js, but rather the browser, which isn't in play here. Edit: It's implemented via Mobile Safari, as pointed out by justincormack -- this comment is invalid.
I find it rather silly to be worried about security given that Apple's one of the largest browser vendors in the world, directly or indirectly via WebKit. More accurately: all increasing of capabilities in non-immediately-apparent sources IS cause for concern. But that has to be weighted against the exhibited competence of the vendor. I find it unlikely that we-vet-everything our-brand-name-is-safe-computing-experien…
Re: Apple accepts Javascript in EPUB ebooks in iBookstore
#24Earlier quoted context omitted.
That sort of protection has nothing to do with js, but rather the browser, which isn't in play here. Edit: It's implemented via Mobile Safari, as pointed out by justincormack -- this comment is invalid.
iBooks is implemented using mobile Safari, so the security model is the same. It uses CSS3 columns to make the pages going across.
Re: Apple accepts Javascript in EPUB ebooks in iBookstore
#25Earlier quoted context omitted.
Javascript is pretty well jailed up, you can't communicate with local and remote files in the same javascript file.
How is this different than Adobe Reader, where the ability to execute code within a document reading application has resulted in world wide exploits of operating systems? If my document reader can execute any code in any language, then any document that I read has the potential to execute malicious code on my computer, and I now have an exploit vector that I need to consider when downloading documents & opening e-mai…
Re: Apple accepts Javascript in EPUB ebooks in iBookstore
#26Re: Apple accepts Javascript in EPUB ebooks in iBookstore
#27Re: Apple accepts Javascript in EPUB ebooks in iBookstore
#28Re: Apple accepts Javascript in EPUB ebooks in iBookstore
#29Earlier quoted context omitted.
" Photoshop CS4 supports scripts written in AppleScript, JavaScript or VBScript. ... " etc.. :) What would you like to see from Adobe to change your mind?
Not rendering magazines as 500MB packs of PNGs would be a start.
Re: Apple accepts Javascript in EPUB ebooks in iBookstore
#30Earlier quoted context omitted.
That sort of protection has nothing to do with js, but rather the browser, which isn't in play here. Edit: It's implemented via Mobile Safari, as pointed out by justincormack -- this comment is invalid.
iBooks is implemented using mobile Safari, so the security model is the same. It uses CSS3 columns to make the pages going across.