[saagarjha]

It’s pretty trivial to encode a backdoor into your app that would let you remotely call native code of your choice.

[yccs27]

I guess this is the reason Apple restricts apps from executing downloaded code.

[saagarjha]

This is without downloading additional code. Reuse attacks such as ROP, or you could just embed an interpreter with the ability to alter native register state. It’s not hard to get Turing completeness into your app in a way that lets it call whatever it wants.

[babesh]

Yeah, it wouldn't be too hard to write an interpreter. It is a lot like compiler class.