Live data from Hacker News

Apple: Heap Overflow in AppleBCMWLANCore Driver

bugs.chromium.org

21–30 of 72 posts

Re: Apple: Heap Overflow in AppleBCMWLANCore Driver

#21

Is this going to be fixed in iOS 10? Some users have apps which will not work with iOS 11, so cannot immediately upgrade.

They’ve done it before - released an update for an older OS after the newer one was introduced - but never for a device that was capable of running the newer OS.

Re: Apple: Heap Overflow in AppleBCMWLANCore Driver

#22
post #17

Earlier quoted context omitted.

Have they previously had an app transition like 32-bit / 64-bit, where some users cannot upgrade?

Not on iOS although it has happened on the Macintosh twice.

I thought they kept doing security updates for 32 bit macs for a little while?

Re: Apple: Heap Overflow in AppleBCMWLANCore Driver

#23
post #15
post #13

Earlier quoted context omitted.

I think these latest sets of wifi flaws are interesting if it turns out they are exploitable by merely being in radio range of an attacker even without joining a malicious network or requiring user interaction. That could quickly become a fast and wormable attack. You could probably flood across an entire city jumping from chip to chip in no time. Especially now that iOS 11's wifi-off button in the control center no…

> Especially now that iOS 11's wifi-off button in the control center no longer actually disables the radio I still can’t belive this decision. I keep my Bluetooth and Wi-Fi off as much as possible and it’s now difficult to to as a result of this change is ios11. Really bothers me.

I really don’t understand why people keep those two off. If you’re not using them they use very little battery at this point; it’s not like it was 10 years ago.

Since Apple keeps detailed usage statistics (from the people who opt in) my guess is they know how common such a behavior is and it’s obviously low enough they don’t think this change is a problem.

I agree with some of the other comments I’ve seen that this probably accomplishes what the user is trying to do (ignoring a Wi-Fi network that’s temporarily behaving poorly) and possibly protecting them (forgetting to turn it back on it running up a huge cell bill). I know I’ve heard complaints from people who accidentally did that a number of times.

Re: Apple: Heap Overflow in AppleBCMWLANCore Driver

#24
post #14

Earlier quoted context omitted.

Have they previously had an app transition like 32-bit / 64-bit, where some users cannot upgrade?

Nope, so this is going to be interesting to watch. Personally I was hoping that they would offer an optional download of 32bit support libraries to let iOS11 users run important existing legacy apps and access their documents, but they seem to push hard on making developers get in line and update their apps. Which is unhelpful for the cases where the developers no longer have any interest in their apps or even exist…

What legacy apps worth keeping “documents” for - I’m assuming non game apps — would be worth supporting? The chances are even if they did provide support for 32 bit abandoned apps, they would break sooner or later with a future OS upgrade.

Besides are you planning on keeping the same IOS device forever? The newest processors are 64 bit only. I doubt that Apple will ever release a new device that will support 32 bit devices - except for maybe a new iPod Touch or iPhone SE.

Re: Apple: Heap Overflow in AppleBCMWLANCore Driver

#25
post #15
post #13

Earlier quoted context omitted.

I think these latest sets of wifi flaws are interesting if it turns out they are exploitable by merely being in radio range of an attacker even without joining a malicious network or requiring user interaction. That could quickly become a fast and wormable attack. You could probably flood across an entire city jumping from chip to chip in no time. Especially now that iOS 11's wifi-off button in the control center no…

> Especially now that iOS 11's wifi-off button in the control center no longer actually disables the radio I still can’t belive this decision. I keep my Bluetooth and Wi-Fi off as much as possible and it’s now difficult to to as a result of this change is ios11. Really bothers me.

Faraday cage cases are going to be popular next season.

Re: Apple: Heap Overflow in AppleBCMWLANCore Driver

#26
post #14

Earlier quoted context omitted.

Have they previously had an app transition like 32-bit / 64-bit, where some users cannot upgrade?

Nope, so this is going to be interesting to watch. Personally I was hoping that they would offer an optional download of 32bit support libraries to let iOS11 users run important existing legacy apps and access their documents, but they seem to push hard on making developers get in line and update their apps. Which is unhelpful for the cases where the developers no longer have any interest in their apps or even exist…

It's not just a matter of the space on disk to hold 32-bit libraries. They must also be loaded into memory if there are 32-bit processes running. This degrades performance system-wide, not just for the abandonware apps.

Re: Apple: Heap Overflow in AppleBCMWLANCore Driver

#27
post #15
post #13

Earlier quoted context omitted.

I think these latest sets of wifi flaws are interesting if it turns out they are exploitable by merely being in radio range of an attacker even without joining a malicious network or requiring user interaction. That could quickly become a fast and wormable attack. You could probably flood across an entire city jumping from chip to chip in no time. Especially now that iOS 11's wifi-off button in the control center no…

> Especially now that iOS 11's wifi-off button in the control center no longer actually disables the radio I still can’t belive this decision. I keep my Bluetooth and Wi-Fi off as much as possible and it’s now difficult to to as a result of this change is ios11. Really bothers me.

This is a bad take. If your threat model has you concerned about people who follow you around and exploit your Wi-Fi firmware, you probably shouldn't ever have Wi-Fi on -- or maybe you shouldn't be using a smartphone.

For everyone else, the new behavior allows users to disconnect from bad Wi-Fi in Control Center while improving their battery life in case they forget to turn Wi-Fi back on.

Re: Apple: Heap Overflow in AppleBCMWLANCore Driver

#30
post #22
post #17

Earlier quoted context omitted.

Not on iOS although it has happened on the Macintosh twice.

I thought they kept doing security updates for 32 bit macs for a little while?

They did, and they’ve been doing that on iOS. The first 64-bit devices came out for years ago.

I was actually thinking of when they left 68K and PowerPC though. I had PowerPC apps that worked through Rosetta for a while and then that was removed when Apple decided it was “time“.

Post reply on HN