Live data from Hacker News

FaceTime bug lets you hear audio of person you are calling before they pick up

9to5mac.com

361–370 of 458 posts

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#361

Earlier quoted context omitted.

not forgetting https://www.jwz.org/blog/2015/04/i-told-you-so-again/

wtf. Clicking your link brought me to http://i.imgur.com/rG0p0b2.gif somehow. jwz doing a referrer troll?? Anyone else see this?

Probably Referer check, copy-pasting the URL works.

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#362
post #307

Earlier quoted context omitted.

Why? I use it all the time and in terms of simplicity it beats all other video calling products.

I'll take a stab at that, although I don't think it's stupid per-se. Everyone I talk to, I talk to via WhatsApp, LINE, or FB Messenger, and generally I only use that method to talk to them, whatever else they're on. All of those have easy one-press buttons to initiate video call. Using some kind of Apple-only technology? I mean I think most people I know are probably on an iPhone, but having to remember everyone's de…

But isn't everyone being on WhatsApp or FB Messenger or whatever just elevating the device uncertainty to platform uncertainty? You still have to remember or check who is on what.

It seems like if they generally are all on iPhone, FaceTime is the one thing you could reliably call them on, and it will even tell you right in the messages app if you can FaceTime them.

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#363

Earlier quoted context omitted.

I think it's much more likely their code is a mess and it's not super obvious when stuff starts and ends and this is just an unintentional mistake.

You hear this excuse all the time, don't FAANG employ the world's very best developers? Maybe their code is a mess for orthogonal reasons - management, profit-motive? Aside: I thought I'd heard devs have automated analysers that step through and find all possible code paths, allowing complex code to be audited for security issues and such? Presumably that's how these sorts of bugs should be found in testing.

Judging from their quality issues, I'm not so sure they're attracting the "world's very best developers" any more.

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#364
post #351

Earlier quoted context omitted.

Possibly a product owner trying out the latest build, receiving a call, accepting it, and then waiting for the call initiator to receive the message that the call has been accepted, and then start sending data and asking: "Why doesn't it take X seconds before I can start talking". To which the engineers possibly explained the reasons and the product owner saying: "But I want it instant, let's bypass all this extra st…

Ah yes, it’s always the product owners fault and engineering is always fault-less. A HN classic.

Also, HN won't comment on how/why Apple insists that iOS is "secure by design". I've brought this up and it gets buried. Why?

https://www.apple.com/business/resources/docs/iOS_Security_O...

This phrase is used several times on their current website:

https://www.google.com/search?q=%22secure+by+design%22+site%...

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#365

Earlier quoted context omitted.

I think it's much more likely their code is a mess and it's not super obvious when stuff starts and ends and this is just an unintentional mistake.

You hear this excuse all the time, don't FAANG employ the world's very best developers? Maybe their code is a mess for orthogonal reasons - management, profit-motive? Aside: I thought I'd heard devs have automated analysers that step through and find all possible code paths, allowing complex code to be audited for security issues and such? Presumably that's how these sorts of bugs should be found in testing.

[deleted]

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#366

Earlier quoted context omitted.

I know. I didnt want to post his supposedly actual public email for fear of being accused of doxxing him.

I doubt he has his public email hooked up to his iPhone's iMessage/FaceTime, anyways.

I wouldn't be surprised if Apple has their own internal iCloud network. Just like Google has their Apps for Business, Apple could have one but just inwards-facing and not hosting any other business.

This means even if you have his internal FaceTime/iMessage ID, you wouldn't be able to contact him because his account and yours exist in 2 realms.

Then again I guess he'd need an external-facing one for public VVIP to FaceTime him. Maybe he just carries 2 phones?

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#367
post #338

Earlier quoted context omitted.

not forgetting https://www.jwz.org/blog/2015/04/i-told-you-so-again/

!WARNING! - This now redirects to an image of a hairy testicle. I think the site owner noticed the traffic and put in a redirect.

It's been that way for years (i.e. visitors from HN get redirected).

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#368
post #19

Earlier quoted context omitted.

doesn’t help that their bug bounty program is invite-only ( at least the last time I checked )

Their bug bounty program seems to mostly be aimed at jailbreakers, rather than bugs like these.

They can aim it at who they want. When it's invite-only they'll only get what they're looking for. I'm certain that just having open bug hunters looking would have at least brought this up. I remember noticing this bug myself but also remember it not being worth my while to report it.

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#369

Earlier quoted context omitted.

I think it's much more likely their code is a mess and it's not super obvious when stuff starts and ends and this is just an unintentional mistake.

You hear this excuse all the time, don't FAANG employ the world's very best developers? Maybe their code is a mess for orthogonal reasons - management, profit-motive? Aside: I thought I'd heard devs have automated analysers that step through and find all possible code paths, allowing complex code to be audited for security issues and such? Presumably that's how these sorts of bugs should be found in testing.

I just keep going back to the XKCD of how "our entire field is bad at what we do": https://www.xkcd.com/2030/

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#370

Earlier quoted context omitted.

You hear this excuse all the time, don't FAANG employ the world's very best developers? Maybe their code is a mess for orthogonal reasons - management, profit-motive? Aside: I thought I'd heard devs have automated analysers that step through and find all possible code paths, allowing complex code to be audited for security issues and such? Presumably that's how these sorts of bugs should be found in testing.

Judging from their quality issues, I'm not so sure they're attracting the "world's very best developers" any more.

Even the best developers need time to develop and robust QA.
Post reply on HN