Live data from Hacker News

Apple accepts Javascript in EPUB ebooks in iBookstore

pigsgourdsandwikis.com

31–34 of 34 posts

Re: Apple accepts Javascript in EPUB ebooks in iBookstore

#31
post #25
post #22

Earlier quoted context omitted.

How is this different than Adobe Reader, where the ability to execute code within a document reading application has resulted in world wide exploits of operating systems? If my document reader can execute any code in any language, then any document that I read has the potential to execute malicious code on my computer, and I now have an exploit vector that I need to consider when downloading documents & opening e-mai…

Chrome one has stood up the best thus far

Right, but "the best" being a very misleading term for anyone not in the know. It too has failed to do the job.. But, of course, no code is perfect. Just keep that in mind.

http://www.informationweek.com/news/security/attacks/2295000...

Re: Apple accepts Javascript in EPUB ebooks in iBookstore

#32
post #15
post #3

This brings a lot of interesting possibilities to technical books. End-of-chapter review questions that are automatically graded being the most obvious.

Or background/animated images in children' books. Or dynamic content adjusting to what you already know / had already read. I.e. I know what a prototype is, automatically, all the chapters/paragraphs explaining it could be hidden.

There are plenty of books with webkit animations already in the bookstore.

Re: Apple accepts Javascript in EPUB ebooks in iBookstore

#33
post #22

Earlier quoted context omitted.

Javascript is pretty well jailed up, you can't communicate with local and remote files in the same javascript file.

How is this different than Adobe Reader, where the ability to execute code within a document reading application has resulted in world wide exploits of operating systems? If my document reader can execute any code in any language, then any document that I read has the potential to execute malicious code on my computer, and I now have an exploit vector that I need to consider when downloading documents & opening e-mai…

Adobe gives the same access it has to save to any folder on the drive, to the scripts in the PDF. Apple doesn't make those kind of mistakes.

Re: Apple accepts Javascript in EPUB ebooks in iBookstore

#34
post #5

Hm... interesting security implications depending on how the code executes, what external info/code it can call

I agree. Logical follow-up questions would be:

- is this using the fast JavaScript JIT (http://news.ycombinator.com/item?id=2666763)?

- what API is available to eBook JavaScript? Can one make Ajax calls? How much of the book's content can one replace? Make permanent changes to book content?

- Depending on e answers, what differences remain between eBook reader and web browser?

Post reply on HN