← Back to context

Comment by rs_rs_rs_rs_rs

14 hours ago

What? The js engine in Safari is open source, they can put Claude to work on it any time they want.

Here's a rough break down, formatted best I can for HN:

  Safari (closed source)
   ├─ UI / tabs / preferences
   ├─ macOS / iOS integration
   └─ WebKit framework (open source) ~60%
        ├─ WebCore (HTML/CSS/DOM)
        ├─ JavaScriptCore (JS engine)
        └─ Web Inspector

There's much more to a browser than JS engine.

They picked to most open-source one.

  • WebKit is not open source?

    Sure there are closed source parts of Safari, but I'd guess at least 90% of safari attack surface is in WebKit and it's parts.

    • In many cases, the difference between a bug and an attack vector lies in the closed source areas.

      This is going to be the case automating attack detection against most programs where a portion is obscured.

      2 replies →

Apple is not the kind of company that typically does these things, even if the entire Safari is open source.