Hacker News Reader

> However, because the .app inside the disk images is dynamically linked, it could change on the server side at any time—without the disk image needing to be modified at all.

Wait, what? This makes no sense: dynamic linking means that it would pull in different libraries on the user’s machine…

View on HN

The article author means filesystem links, not libraries. Earlier in the article:

> [...] creating a symbolic link (or "symlink"—similar to an alias) to an app hosted on an attacker-controlled Network File System (NFS) server, and then creating a .zip archive containing that symlink [...]

It's dynamic in the context of a symlink, not meaning dynamic libraries.

Oh, that makes more sense. That sentence would be much improved by switching those words around, because I’m too conditioned to apps being dynamically linked in the library/framework :)

Reply on news.ycombinator.com