Live data from Hacker News

Psychic Paper: iOS Sandbox Escape

siguza.github.io

31–40 of 61 posts

Re: Psychic Paper: iOS Sandbox Escape

#31

> I just hate GUIs for development, especially when you Google how to do something, and the answer is a series of 17 “click here and there”s that are no longer valid because all the GUI stuff moved somewhere else in the last update. It's not just developer tools that suffer from this problem. I opened iMovie recently after not playing with it for almost 10 years, and was so flabbergasted at how everything worked. Too…

I'm convinced that the reason for the constant game of GUI musical chairs - of which Microsoft is the most guilty - is due to developers attempting to justify their employment.

Re: Psychic Paper: iOS Sandbox Escape

#32
The section of the WHATWG HTML spec about parsing XHTML begins with this note:

> An XML parser, for the purposes of this specification, is a construct that follows the rules given in XML to map a string of bytes or characters into a Document object.

> Note: At the time of writing, no such rules actually exist.

What do the authors of HTML mean by this? Isn't there a spec for XML? There is -- here's what it has to say about comments (https://www.w3.org/TR/xml/#sec-comments):

    Comment ::= ''
The HTML spec, on the other hand, writes out the token state machine explicitly. There are ten states involved with parsing comments; here's one (https://html.spec.whatwg.org/multipage/parsing.html#comment-...):

    12.2.5.45 Comment state
    
    Consume the next input character:
     U+003C LESS-THAN SIGN (
The spec defines what to do for every character, even characters that should not appear in valid HTML. An HTML parser will behave exactly the same as another HTML parser in all circumstances.

You can see the success of this approach on the real web; inconsistent HTML parsing between browsers is no longer the issue it used to be 15 years ago. It may be more work to write, but I wish HTML's precise, step-by-step format was more common. Writing a spec as a list of rules makes it easier to implement (as a first pass, you can just go line-by-line and translate it to code) and reduces the chance of inconsistencies like the one in the article (and their associated security implications).

Re: Psychic Paper: iOS Sandbox Escape

#33
post #31

> I just hate GUIs for development, especially when you Google how to do something, and the answer is a series of 17 “click here and there”s that are no longer valid because all the GUI stuff moved somewhere else in the last update. It's not just developer tools that suffer from this problem. I opened iMovie recently after not playing with it for almost 10 years, and was so flabbergasted at how everything worked. Too…

I'm convinced that the reason for the constant game of GUI musical chairs - of which Microsoft is the most guilty - is due to developers attempting to justify their employment.

Software production busy work! New code, new UI, new already-out-of-date documentation.

Drives user engagement too: people spend longer in your app (working out how the fuck to use it, again!).

Re: Psychic Paper: iOS Sandbox Escape

#34

Earlier quoted context omitted.

Most plists are NOT NSUserDefaults / CFPreferences

Right, but those would be the closest analog to the registry would it not?

Kind of but that doesn’t make it the same, especially when it doesn’t suffer from all the issues that plague the registry.

Re: Psychic Paper: iOS Sandbox Escape

#35
post #31

> I just hate GUIs for development, especially when you Google how to do something, and the answer is a series of 17 “click here and there”s that are no longer valid because all the GUI stuff moved somewhere else in the last update. It's not just developer tools that suffer from this problem. I opened iMovie recently after not playing with it for almost 10 years, and was so flabbergasted at how everything worked. Too…

I'm convinced that the reason for the constant game of GUI musical chairs - of which Microsoft is the most guilty - is due to developers attempting to justify their employment.

The IT industry benefits from fashionable UIs (dark or bright, angular or rounded, 2D or 3D, etc.) and architectures (server centric, client centric, etc.) quite similarly to the fashion industry benefiting from rising and falling hemlines and wide vs skinny ties.

If you live long enough, you see cycles repeat.

Re: Psychic Paper: iOS Sandbox Escape

#36
post #6

Maybe we should take this as a lesson that we should use the simplest marshalling format that adequately captures our use cases rather than using a swiss-army knife format like XML.

I’m not sure that there were much better choices available at the time. IIRC property lists date back to NextStep. By the time stuff like JSON started popping up, plists were pervasive all throughout OS X. Typical legacy problem!

The format plists used before XML was very JSON-like. It had its own set of issues, however.

Re: Psychic Paper: iOS Sandbox Escape

#37

> I just hate GUIs for development, especially when you Google how to do something, and the answer is a series of 17 “click here and there”s that are no longer valid because all the GUI stuff moved somewhere else in the last update. It's not just developer tools that suffer from this problem. I opened iMovie recently after not playing with it for almost 10 years, and was so flabbergasted at how everything worked. Too…

It’s hilarious that it was easier for me to adjust to FCPX than to try to move my amateur video editing brain to new iMovie, so much so that I just renew my trial once a year instead of try to use iMovie. They ported the iOS version and it shows (especially considering how many features are missing from iMovie 09).

Re: Psychic Paper: iOS Sandbox Escape

#38
post #31

> I just hate GUIs for development, especially when you Google how to do something, and the answer is a series of 17 “click here and there”s that are no longer valid because all the GUI stuff moved somewhere else in the last update. It's not just developer tools that suffer from this problem. I opened iMovie recently after not playing with it for almost 10 years, and was so flabbergasted at how everything worked. Too…

I'm convinced that the reason for the constant game of GUI musical chairs - of which Microsoft is the most guilty - is due to developers attempting to justify their employment.

My experience has been the opposite - developers being resistant to frontend changes, which tend to get pushed through by UI/UX people (which is their job), or in more broken organizations, opinionated managers or executives.

Re: Psychic Paper: iOS Sandbox Escape

#39

This reminds me a lot of one of the original ways to run unsigned code on the Sony PSP. If you made two directories: SomeApp SomeApp% And then launch the folder with the % sign then the code that checks for valid signatures will check in the directory without the %, but the code that actually launches the binary will still run the code in the directory with the %. So all you need to do is get any binary with a valid…

Any other PSP homebrew facts or resources you could share? The psp scene was my introduction to running modding.

Re: Psychic Paper: iOS Sandbox Escape

#40

> I just hate GUIs for development, especially when you Google how to do something, and the answer is a series of 17 “click here and there”s that are no longer valid because all the GUI stuff moved somewhere else in the last update. It's not just developer tools that suffer from this problem. I opened iMovie recently after not playing with it for almost 10 years, and was so flabbergasted at how everything worked. Too…

Even many programming examples are long out of date. Google for how to do something and the top answers are 10-15 years old using jquery or C++11 etc...
Post reply on HN