Live data from Hacker News

iMessage: Malformed Message Bricks iPhone

bugs.chromium.org

191–200 of 279 posts

Re: iMessage: Malformed Message Bricks iPhone

#191
post #136

Earlier quoted context omitted.

Hahaha on Yahoo we called it booting.

On AOL we called it "punting", and the apps that facilitated it were the first reason I ever wanted to code.

Ditto. I got into VB because of this "exploit," and that kicked off my inadvertent career choice. Punters were all the rage.

By the time AOL 3.0 rolled around, it wasn't bluescreening the machine, rather just ending the AOL process and disconnecting.

Re: iMessage: Malformed Message Bricks iPhone

#192

Earlier quoted context omitted.

irc has kicking / banning and kickbanning.. not necessarily booting (unless you used it as lingo) and certainly not HTML parsing.

/ping +++ATH0

There's supposed to be a delay in the Hayes protocol to prevent this kind of thing, but many "Hayes compatible" implementations didn't implement that part (through ignorance? working around a patent?), so this trick would work pretty well . . .

Re: iMessage: Malformed Message Bricks iPhone

#193
post #143
post #123

Earlier quoted context omitted.

Publishing the gist of the exploit, combined with access to diffs of the patch should be enough for people to reverse engineer the exploit.

Where are they going to get access to the diffs of the patch? iOS is closed source.

Reading (dis)assembly is a skill many in our profession are required to learn. It’s common in OS & security fields. Heck, when developing Windows on ARM we were told Friday that we’d come to work Monday with a mandatory “no source” debugging session where we had up to an hour to describe a hanged program’s intended behavior and why it was hanged. One of my colleagues also refused my symbols when I asked for help debugging a program. He was more comfortable in ASM than the latest C++

Re: iMessage: Malformed Message Bricks iPhone

#194

Earlier quoted context omitted.

On AOL we called it "punting", and the apps that facilitated it were the first reason I ever wanted to code.

Strange nostalgic memories of "AOHell" and "LuciferX" come to mind... If I remember, a lot of them were visual basic apps that would use SendKeys() to control AOL via keyboard shortcuts. A little like the wild west back then...

Anyone recall the "SubZer0" proggie? (and who else recalls calling apps "proggies" in our kitchy chat rooms?)

Re: iMessage: Malformed Message Bricks iPhone

#195
post #104

Earlier quoted context omitted.

Turning off iMessage to prevent the bug is like turning off a car to prevent to consume petrol.. what a solution

Where I live nobody uses iMessage so this sounds like a good workaround :P (Yes yes I know it’s been patched already...)

Same here. Most iPhone users around me use Whatsapp. I don't live in the US.

Re: iMessage: Malformed Message Bricks iPhone

#196

Stupid question: How is the example python program actually sending an iMessage? Since Apple generally has the system locked down.

It looks like it uses some AppleScript and Frida [1] to inject code into Messages.app on the Mac.

1: https://www.frida.re/

Re: iMessage: Malformed Message Bricks iPhone

#197
post #75
post #68

Earlier quoted context omitted.

Security researchers have to assume that if they've found a vulnerability, it's only a matter of time before the evil people will find it as well - that is if they haven't found it already. That's why all disclosures come with window - if they don't, the companies aren't under any pressure to update their systems, the exploit start being used in the wild, etc. The window is not ideal, but it is better than no window.…

Still make no sense, I agree the window is a good policy to force lazy vendors to act as they should. But what’s the point of reducing the window for nice vendors who quickly delivered a patch? This is totally counter productive. In order to incentivize vendors to deliver patches more and more quickly, good actors should profits from that extra time to secure their user base. In a ideal world that might even permit t…

The patch itself reveals the vulnerability. Attackers analyze these things to see what they’ve fixed. If you release a patch but don’t announce the vulnerability that was patched, then you’re just hiding it from good guys who don’t have time to dig through the patch.

Re: iMessage: Malformed Message Bricks iPhone

#198

Earlier quoted context omitted.

Strange nostalgic memories of "AOHell" and "LuciferX" come to mind... If I remember, a lot of them were visual basic apps that would use SendKeys() to control AOL via keyboard shortcuts. A little like the wild west back then...

Anyone recall the "SubZer0" proggie? (and who else recalls calling apps "proggies" in our kitchy chat rooms?)

I recall a few, FaTe, AoLazy, and others being shared in island55. Also memories of Master AOL & Internal/Overhead accounts that allowed infinite scrolling in chat.

Re: iMessage: Malformed Message Bricks iPhone

#199

Speaking as an ex-Apple employee, I'll just point out that a really malicious actor could have used this to harm some significant percentage of the installed iOS infrastructure, and done critical damage to Apple as a company with it. In fact, I don't know the percentage of users still on <12.3, but maybe they still could. A band-aid fix for this one bug should not be where they stop here.

They're (Apple) rather lucky that their user base vehemently upgrades whenever possible.

Re: iMessage: Malformed Message Bricks iPhone

#200
post #136

Earlier quoted context omitted.

Hahaha on Yahoo we called it booting.

On AOL we called it "punting", and the apps that facilitated it were the first reason I ever wanted to code.

Same, this is how I got started with coding as a teenager.
Post reply on HN