Live data from Hacker News

Apple accepts Javascript in EPUB ebooks in iBookstore

pigsgourdsandwikis.com

21–30 of 34 posts

Re: Apple accepts Javascript in EPUB ebooks in iBookstore

#22
post #6

Earlier quoted context omitted.

So my ebooks can now contain executable root kits. Cool.

Javascript is pretty well jailed up, you can't communicate with local and remote files in the same javascript file.

How is this different than Adobe Reader, where the ability to execute code within a document reading application has resulted in world wide exploits of operating systems?

If my document reader can execute any code in any language, then any document that I read has the potential to execute malicious code on my computer, and I now have an exploit vector that I need to consider when downloading documents & opening e-mail attachments.

I understand that the code can be sandboxed, but before I implicitly trust the sandboxing technology, I'd have to see an example of an unexploitable sandbox. I don't know of any - but that doesn't mean they don't exist.

Re: Apple accepts Javascript in EPUB ebooks in iBookstore

#23
post #14

Earlier quoted context omitted.

That sort of protection has nothing to do with js, but rather the browser, which isn't in play here. Edit: It's implemented via Mobile Safari, as pointed out by justincormack -- this comment is invalid.

I find it rather silly to be worried about security given that Apple's one of the largest browser vendors in the world, directly or indirectly via WebKit. More accurately: all increasing of capabilities in non-immediately-apparent sources IS cause for concern. But that has to be weighted against the exhibited competence of the vendor. I find it unlikely that we-vet-everything our-brand-name-is-safe-computing-experien…

Presumably they have. But given the number of times Safari has been remotely exploitable in the past, that's not necessarily reassuring.

Re: Apple accepts Javascript in EPUB ebooks in iBookstore

#24
post #14

Earlier quoted context omitted.

That sort of protection has nothing to do with js, but rather the browser, which isn't in play here. Edit: It's implemented via Mobile Safari, as pointed out by justincormack -- this comment is invalid.

iBooks is implemented using mobile Safari, so the security model is the same. It uses CSS3 columns to make the pages going across.

Ah hah, I was mistaken. Thanks!

Re: Apple accepts Javascript in EPUB ebooks in iBookstore

#25
post #22

Earlier quoted context omitted.

Javascript is pretty well jailed up, you can't communicate with local and remote files in the same javascript file.

How is this different than Adobe Reader, where the ability to execute code within a document reading application has resulted in world wide exploits of operating systems? If my document reader can execute any code in any language, then any document that I read has the potential to execute malicious code on my computer, and I now have an exploit vector that I need to consider when downloading documents & opening e-mai…

Chrome one has stood up the best thus far

Re: Apple accepts Javascript in EPUB ebooks in iBookstore

#27
http://www.soozone.com We accept pyapal payment. You do not miss it. We need your support and trust!!! free shipping (Jordan wholesale) Dear customers, thank you for your support of our company. Here, there's good news to tell you: The company recently launched a number of new fashion items! ! Fashionableand welcome everyone to come buy. (Jordan wholesale) http://www.soozone.com

Re: Apple accepts Javascript in EPUB ebooks in iBookstore

#29

Earlier quoted context omitted.

" Photoshop CS4 supports scripts written in AppleScript, JavaScript or VBScript. ... " etc.. :) What would you like to see from Adobe to change your mind?

Not rendering magazines as 500MB packs of PNGs would be a start.

Bingo. Their magazine viewer is bloated. RMSDK is garbage. Start by bringing their expertise in layout and fonts to things that people are actually using. Namely, WebKit and JS.

Re: Apple accepts Javascript in EPUB ebooks in iBookstore

#30
post #14

Earlier quoted context omitted.

That sort of protection has nothing to do with js, but rather the browser, which isn't in play here. Edit: It's implemented via Mobile Safari, as pointed out by justincormack -- this comment is invalid.

iBooks is implemented using mobile Safari, so the security model is the same. It uses CSS3 columns to make the pages going across.

[deleted]
Post reply on HN