{"id":14698,"date":"2016-06-02T11:15:31","date_gmt":"2016-06-02T15:15:31","guid":{"rendered":"http:\/\/mjtsai.com\/blog\/?p=14698"},"modified":"2016-06-02T11:16:15","modified_gmt":"2016-06-02T15:16:15","slug":"sandbox-workaround-for-blizzard-apps","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2016\/06\/02\/sandbox-workaround-for-blizzard-apps\/","title":{"rendered":"Sandbox Workaround for Blizzard Apps"},"content":{"rendered":"

Stefan Esser<\/a> posted a screenshot of code<\/a> where it looks like Apple’s OSes skip a sandbox check if the code is running under Blizzard’s team identifier. Stefan<\/a> Esser<\/a>:<\/p>\n

I wonder why the iOS sandbox omits certain sandbox checks if code is signed by Blizzard Entertainment Inc.<\/p><\/blockquote>\n

It looks like if you are signed by blizzard you can execute whatever executables you find on an iOS device.<\/p><\/blockquote>\n

Luckily we all know that Blizzard Games never have remote vulnerabilities :-)<\/p><\/blockquote>\n

This struck people as dangerous<\/a> and<\/a> unfair<\/a>, which perhaps speaks to how much faith developers have in Apple fairly enforcing its own rules. However, it turns out that it’s not actually a sandbox exception but rather a workaround<\/a> for a crashing bug.<\/p>\n

POM<\/a>:<\/p>\n

This path is for the access()<\/code> call, not for the actual enforcement.<\/p><\/blockquote>\n

But it doesn’t mean they can execute, it means we make them believe they could.<\/p><\/blockquote>\n

John Gruber<\/a>:<\/p>\n

Practically speaking, all sandboxing rules still apply to Blizzard apps; workaround doesn’t allow operations that other apps can’t do too.<\/p><\/blockquote>\n

And Blizzard has fixed their updater, so the workaround shouldn’t be needed in next update.<\/p><\/blockquote>\n

My takeaway is that Apple will go to extraordinary lengths to avoid crashers in super-popular apps, even when it’s entirely the app’s fault.<\/p><\/blockquote>","protected":false},"excerpt":{"rendered":"

Stefan Esser posted a screenshot of code where it looks like Apple’s OSes skip a sandbox check if the code is running under Blizzard’s team identifier. Stefan Esser: I wonder why the iOS sandbox omits certain sandbox checks if code is signed by Blizzard Entertainment Inc. It looks like if you are signed by blizzard […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"apple_news_api_created_at":"","apple_news_api_id":"","apple_news_api_modified_at":"","apple_news_api_revision":"","apple_news_api_share_url":"","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_is_hidden":false,"apple_news_is_paid":false,"apple_news_is_preview":false,"apple_news_is_sponsored":false,"apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":"\"\"","apple_news_suppress_video_url":false,"apple_news_use_image_component":false,"footnotes":""},"categories":[2],"tags":[1390,131,31,1137,26,30,32,1199,53],"class_list":["post-14698","post","type-post","status-publish","format-standard","hentry","category-technology","tag-blizzard","tag-bug","tag-ios","tag-ios-9","tag-iosapp","tag-mac","tag-macapp","tag-mac-os-x-10-11","tag-sandboxing"],"apple_news_notices":[],"_links":{"self":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/14698","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/comments?post=14698"}],"version-history":[{"count":2,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/14698\/revisions"}],"predecessor-version":[{"id":14701,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/14698\/revisions\/14701"}],"wp:attachment":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/media?parent=14698"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/categories?post=14698"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/tags?post=14698"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}