Hacker News Reader

The ability to execute from writable memory is enforced at the process level, and only Safari and a few other Apple apps get that permission.

Javascript in Safari is jitted - but JS in a UIWebView used by a third-party app is not.

View on HN

Gotta love android, you can cheerfully mprotect away the write-protection on executable pages. I've done some dynamic stub code removal that way. Worst case, you can only hose your own process.

Well that's a relief. Now I don't have to feel bad about not turning that idea into a proof of concept.

Reply on news.ycombinator.com