Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple: Heap Overflow in AppleBCMWLANCore Driver

bugs.chromium.org

Post reply on HN
Print view View original

61–70 of 72 posts

Re: Apple: Heap Overflow in AppleBCMWLANCore Driver

#61

Post by pjc50 »

coldtea wrote: post #59
0x0 wrote: post #14

Earlier quoted context omitted.

Nope, so this is going to be interesting to watch. Personally I was hoping that they would offer an optional download of 32bit support libraries to let iOS11 users run important existing legacy apps and access their documents, but they seem to push hard on making developers get in line and update their apps. Which is unhelpful for the cases where the developers no longer have any interest in their apps or even exist…

> Which is unhelpful for the cases where the developers no longer have any interest in their apps or even exist (bankrupt, disbanded, in some cases deceased) If they are "bankrupt, disbanded, in some cases deceased" then maybe insisting on using those apps are not the best course for the user either...

As I commented last time on the subject: https://news.ycombinator.com/item?id=15285252

Sometimes the apps are the only way to access something else, in this case a car remote unlock.

Sometimes someone has paid actual money for an app, more than the $1 baseline; some music apps are in triple figures.

Re: Apple: Heap Overflow in AppleBCMWLANCore Driver

#62

Post by bostand »

pjc50 wrote: post #61
coldtea wrote: post #59

Earlier quoted context omitted.

> Which is unhelpful for the cases where the developers no longer have any interest in their apps or even exist (bankrupt, disbanded, in some cases deceased) If they are "bankrupt, disbanded, in some cases deceased" then maybe insisting on using those apps are not the best course for the user either...

As I commented last time on the subject: https://news.ycombinator.com/item?id=15285252 Sometimes the apps are the only way to access something else, in this case a car remote unlock. Sometimes someone has paid actual money for an app, more than the $1 baseline; some music apps are in triple figures.

This is a valid concern, I don't understand why you are getting downvoted.

Re: Apple: Heap Overflow in AppleBCMWLANCore Driver

#63

Post by senatorobama »

ComputerGuru wrote: post #45
senatorobama wrote: post #11

Earlier quoted context omitted.

These companies with widely available low level firmware should really switch to Rust.

I love rust and have rewritten a dozen cross-platform utilities in it, but rust is nowhere near usable for general purpose embedded development.

why??

Re: Apple: Heap Overflow in AppleBCMWLANCore Driver

#64

Post by 0x0 »

coldtea wrote: post #60
0x0 wrote: post #50

Earlier quoted context omitted.

What good is RAM for if not running the applications a user needs to run? If the user is not currently running a 32bit app, drop the libraries from RAM. That is such a non-argument. The amount of space and time needed to load and unload 32bit support libraries is probably 1% of the space and time used every time a user loads a game, or the facebook app, for example.

> What good is RAM for if not running the applications a user needs to run? What good is degraded performance because some BS game/app who on top of it is abandoned from its developer for years, and it will stop working anyway sooner or later, needs 32-bit mode? Especially when you can find 200 replacement that work fine in 64-bit and are upgraded regularly.

Where do I find 200 replacement apps for a car unlocking app? https://news.ycombinator.com/item?id=15302231

Re: Apple: Heap Overflow in AppleBCMWLANCore Driver

#65

Post by Nullabillity »

coldtea wrote: post #60
0x0 wrote: post #50

Earlier quoted context omitted.

What good is RAM for if not running the applications a user needs to run? If the user is not currently running a 32bit app, drop the libraries from RAM. That is such a non-argument. The amount of space and time needed to load and unload 32bit support libraries is probably 1% of the space and time used every time a user loads a game, or the facebook app, for example.

> What good is RAM for if not running the applications a user needs to run? What good is degraded performance because some BS game/app who on top of it is abandoned from its developer for years, and it will stop working anyway sooner or later, needs 32-bit mode? Especially when you can find 200 replacement that work fine in 64-bit and are upgraded regularly.

That's the point here, if (offline) apps randomly break then your platform is crap. Anything cloud-reliant (in that case) would have broken a long time ago anyway and isn't really relevant.

Re: Apple: Heap Overflow in AppleBCMWLANCore Driver

#66

Post by walterbell »

coldtea wrote: post #60
0x0 wrote: post #50

Earlier quoted context omitted.

What good is RAM for if not running the applications a user needs to run? If the user is not currently running a 32bit app, drop the libraries from RAM. That is such a non-argument. The amount of space and time needed to load and unload 32bit support libraries is probably 1% of the space and time used every time a user loads a game, or the facebook app, for example.

> What good is RAM for if not running the applications a user needs to run? What good is degraded performance because some BS game/app who on top of it is abandoned from its developer for years, and it will stop working anyway sooner or later, needs 32-bit mode? Especially when you can find 200 replacement that work fine in 64-bit and are upgraded regularly.

If a customers pays Apple $1000 for a device and uses that device to create valuable data which cannot be migrated to another app, they may expect their device to continue providing the functionality for which it was purchased. It still contains their data + app. Customers want access to their DATA, not apps, not devices - those are mediating tools which change over time.

If Apple wants to force apps to do something, they can force developers to create interoperable data that can be migrated without the developer's consent or continued existence. Until then, Apple has more resources than Microsoft and Linux, which both provide backward compatibility for old apps on new platforms. This is a solved problem.

Why penalize iOS platform customers who were the earliest adopters and had the highest chance of creating data which is now orphaned in abandoned-but-functional offline apps? Let's not get into the Apple's mis-steps on the App Store, which is what caused many iOS developers to go out of business or stop supporting apps.

Re: Apple: Heap Overflow in AppleBCMWLANCore Driver

#67

Post by revelation »

floatingatoll wrote: post #41
revelation wrote: post #3

Earlier quoted context omitted.

This is a bug that was already fixed. It means nothing in the grand scheme. In the current grand scheme, Apple and Qualcomm are also currently suing each other and I'm pretty sure part of that is Apple withholding billions in payments.

This is a Hacker News post about an interesting security vulnerability. It is, by both moderator and owner intentions, specifically meaningful in the 'grand scheme' of Hacker News, a site set up to permit people to discuss links. Yes, at a different level of business, Apple has an open lawsuit against Qualcomm, but that's not the scope that we're here to discuss. Mentioning it is fine, linking to a recent HN post abo…

You are not a mod, you are a fool responding to a comment without ever reading the comment mine was in response to. What the fuck.

Re: Apple: Heap Overflow in AppleBCMWLANCore Driver

#68

Post by tinus_hn »

0x0 wrote: post #64
coldtea wrote: post #60

Earlier quoted context omitted.

> What good is RAM for if not running the applications a user needs to run? What good is degraded performance because some BS game/app who on top of it is abandoned from its developer for years, and it will stop working anyway sooner or later, needs 32-bit mode? Especially when you can find 200 replacement that work fine in 64-bit and are upgraded regularly.

Where do I find 200 replacement apps for a car unlocking app? https://news.ycombinator.com/item?id=15302231

If your car can only be unlocked by your phone you made a mistake when buying it. Just like if it features proprietary chargers. These things just don't last.

Re: Apple: Heap Overflow in AppleBCMWLANCore Driver

#69

Post by Razengan »

kranner wrote: post #48
Razengan wrote: post #18

Earlier quoted context omitted.

If the developer is bankrupt, disbanded or deceased then the app generally can not remain published for longer than a year at most anyway. If the developer does not have any interest in updating their own app, do I as a user care about their apps?

> If the developer does not have any interest in updating their own app, do I as a user care about their apps? A developer's primary interest in their app is to earn an income. A user's interest is in using the app for whatever functionality it provided. There's no symmetry here.

If the developer doesn’t want to update their apps to fully support my device, then I would look for an alternative.

There are almost 0 cases where I would withhold an OS update in order to keep using an specific app, let alone change my device, and I’m completely on Apple’s side for finally killing 32-bit.

Re: Apple: Heap Overflow in AppleBCMWLANCore Driver

#70

Post by 0x0 »

tinus_hn wrote: post #68
0x0 wrote: post #64

Earlier quoted context omitted.

Where do I find 200 replacement apps for a car unlocking app? https://news.ycombinator.com/item?id=15302231

If your car can only be unlocked by your phone you made a mistake when buying it. Just like if it features proprietary chargers. These things just don't last.

I see. Is buying an iphone or an ipad a mistake as well? They require proprietary lightning cables to charge.
Post reply on HN