On: Severity HIGH security problem to be announced wit...

[ChocolateGod]

> Why hasn't Apple rewritten libtiff, libpng, libjpeg, libwebp, et c in Swift?

Because they're shared libraries which other programs have linked to.

Additionally they've had decades of work and rewriting them increases chance that it will break something.

[sneak → ChocolateGod]

I'm talking about for use in Apple's first-party apps, like PassKit/Wallet, which is how the zeroclick happened recently. Apple gets to choose what codecs PassKit uses.

They also use them in Safari, AFAIK.

I'm also pretty sure most consumers of them are using them via ImageIO, which is under Apple's exclusive control.

[runeks → ChocolateGod]

> Because they're shared libraries which other programs have linked to.

It's almost always apple's own iMessage app that gets compromised; so they can use whatever library they want.