Live data from Hacker News

'Text bomb' is latest Apple bug

bbc.com

21–30 of 113 posts

Re: 'Text bomb' is latest Apple bug

#22

The linked blog assures people that this can't be used to access data. Once something is crashing an app/OS, can you really say that? I mean, can you be sure there's no one clever enough to capitalize on the underlying software error leading to this state?

That would be a general issue with app crashing, and a huge deal worth it’s own series of articles. iOS’ sandboxing makes it so unlikely this exists, it’s not worth mentioning and the sensational writing might be counterproductive to getting the actual issue fixed. To use an analogy, it’d be like mentioning that someone could hack Google in an article about Gmail downtime.

I see your point, but I actually think users should be _more_ alarmed when an input makes software crash, for just this reason. They tend to think of it as a harmless annoyance.

Also, while sandboxing may be designed to prevent this, Messages is probably also designed not to crash on link sharing.

Re: 'Text bomb' is latest Apple bug

#24
post #21

- Mr Masri said he "always reports bugs" before releasing them. Well I don't think Apple really reads bug reports.

They do if you file them at radar.apple.com. I've had back and forths with them on some video card performance issues after sleep after filing a report there.

Re: 'Text bomb' is latest Apple bug

#26
post #21

- Mr Masri said he "always reports bugs" before releasing them. Well I don't think Apple really reads bug reports.

They do if you file them at radar.apple.com. I've had back and forths with them on some video card performance issues after sleep after filing a report there.

What is that site? I have a working Apple ID and it won't even let me sign in.

Re: 'Text bomb' is latest Apple bug

#27
Come to think of it, I believe I've heard of multiple "making the device render this text causes a crash" bugs for Apple devices, but never on any other platforms. Is this type of bug just that much more common on Apple devices, or are there plenty of other cases out there that I just don't know about?

Re: 'Text bomb' is latest Apple bug

#28
post #5

Based on a web search, https://bogdanz.me/work/diddu.html might be a working mirror of the proof of concept. It appears to contain a 10MB long UTF-8 mess in both the og:title meta content and in a mailto: link. I'd guess it's supposed to crash iOS apps by either posting that link if it displays links in a thumbnail element using og:title or otherwise by pasting the huge mailto link contained in the webpage, or perhap…

Can confirm, just crashed my friends iPhone X. Required a hard reboot, was locked up completely.

Re: 'Text bomb' is latest Apple bug

#29
post #5

Based on a web search, https://bogdanz.me/work/diddu.html might be a working mirror of the proof of concept. It appears to contain a 10MB long UTF-8 mess in both the og:title meta content and in a mailto: link. I'd guess it's supposed to crash iOS apps by either posting that link if it displays links in a thumbnail element using og:title or otherwise by pasting the huge mailto link contained in the webpage, or perhap…

Can confirm - am the owner of the mirror

Re: 'Text bomb' is latest Apple bug

#30

Earlier quoted context omitted.

They do if you file them at radar.apple.com. I've had back and forths with them on some video card performance issues after sleep after filing a report there.

What is that site? I have a working Apple ID and it won't even let me sign in.

You have to have a (free) developer account.
Post reply on HN