Hacker News Reader

I think you mean that you can have interpreted javascript, just not JIT compilers. They don't allow you to mark memory as executable. That syscall is completely disabled on their systems.

View on HN

It is not, moprotect (and mach_vm_protect) work just fine if you have the appropriate entitlements or have a way of getting around its checks.

I think the entitlements are not offered to apps such as firefox and those that are not Apple correct?

Some of them are, but they cannot be used with apps delivered on the App Store.

It can't be disabled because Safari and Webkit uses JIT for JavaScript. Probably it's enabled for apps signed by Apple.

True it is disabled if you aren't Apple.

Reply on news.ycombinator.com