Path: ...!2.eu.feeder.erje.net!3.eu.feeder.erje.net!feeder.erje.net!news.samoylyk.net!.POSTED.public-nat-14.vpngate.v4.open.ad.jp!not-for-mail
From: Wolf Greenblatt <wolf@greenblatt.net>
Newsgroups: misc.phone.mobile.iphone,comp.sys.mac.apps
Subject: Re: Orphaned CodoPods are found in Apple software
Date: Sat, 6 Jul 2024 19:45:29 -0400
Organization: Private News Server
Message-ID: <v6ckup$186t1$1@news.samoylyk.net>
References: <v6brna$16iit$1@news.samoylyk.net> <rzeiO.8448$pVB9.6500@fx34.iad> <v6c85a$17bja$1@news.samoylyk.net> <v6c8sk$9fdv$1@solani.org> <letr8cFge14U2@mid.individual.net> <v6cjb6$9l4b$1@solani.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Injection-Date: Sat, 6 Jul 2024 23:45:30 -0000 (UTC)
Injection-Info: news.samoylyk.net; posting-host="public-nat-14.vpngate.v4.open.ad.jp:219.100.37.246";
	logging-data="1317793"; mail-complaints-to="abuse@samoylyk.net"
Bytes: 2332
Lines: 37

On Sat, 6 Jul 2024 23:17:58 -0000 (UTC), badgolferman wrote:

>>> We're being told it's not Apple's job to find security holes in other
>>> peoples dependencies so it's not their fault. 
>> 
>> You are desperately trying to blame Apple, because: troll.
>> 
> 
> Didn't you just say this?
> 
> "It's not Apple's job to police third-party package mangers."

Isn't Swift touted to be "safe by design" on Apple own corporate web pages?

https://developer.apple.com/swift/

"Swift is a powerful and intuitive programming language for all Apple
platforms. It's easy to get started using Swift, with a
concise-yet-expressive syntax and modern features you'll love. Swift code
is safe by design and produces software that runs lightning fast."

"Designed for safety"

"Swift eliminates entire classes of unsafe code"

"Swift makes software safer and faster, while also making programming more
fun."

"Another safety feature is that by default Swift objects can never be nil.
This makes code much cleaner and safer"

"Swift syntax ensures you to safely deal with it using the ? syntax to
indicate to the compiler you understand the behavior and will handle it
safely."

"Swift is perfect for use in server apps that need runtime safety"

If researchers can find these holes, what is the reason Apple can't?