391–400 of 464 posts
Just looking at the readme sample code it appears to be using APIs unavailable in iOS, so where is the vulnerability?
Explain I'm naive: why would Apple's bug bounty program be so poorly run? Is it simply a sign of organizational failure? (e.g. perhaps the managers running the program have been promoted to a position that they simply don't belong in, and higher up execs don't care? Or are they prioritizing profit over success?) I would think that, given the profitability and positioning of Apple in the marketplace, that they would b…
ironically, spoken by Gates @0:52 https://www.youtube.com/watch?v=H27rfr59RiE
Interesting to note: these exploits aren't caused by memory safety, like a lot of other Apple exploits, but by plain API abuse and bad design.
Until we understand and push through a system (whether law or practice) that makes harming others, especially against their will and intentionally, far more costly than the massive returns and profits they today produce, NONE of these kinds of behaviors will ever cease. The examples are numerous; * Violation of human right to privacy and property * Violation of human right to not being tracked * Illegitimate wars * P…
> Siphoning off potential and sabotaging developing countries through human resource poaching called "immigration" You think immigration should be illegal? > Government theft and fractional enslavement through taxation You really had me in agreement with the first few items. You are not a serious person.
Earlier quoted context omitted.
Android does them just fine: https://source.android.com/devices/tech/ota/reduce_size In particular, bsdiff has been around for a very long time and is an industry standard binary diffing tool.
Yeah, I mentioned bsdiff in my original comment. I don't think Android uses it for operating system updates, though, as far as I can tell. I believe that page is describing APK updates (i.e. app updates).
Earlier quoted context omitted.
The Gamed 0-day compiles just fine. I can run it on my iPhone with iOS 14.8 and it shows 300 contact information gathered apparently from various sources without me giving any permission at all.
maybe they 'fixed' it by not allowing any app of this kind (specific Api call) in the appstore? wouldn't challenge you to try and publish an example app though...
Earlier quoted context omitted.
I wasn't clear. It is dynamically constructing an API call that Objective-C allows. The objc_msgSend stuff.
Which you can call directly from Swift.
Earlier quoted context omitted.
>My Bosch fridge is a smart fridge and I plan on putting it on a VLAN. As another new owner of a Bosch fridge, why put it on anything at all? I just peeled the sticker that told me how to connect off, threw it in the trash, and treat it just like my old non-connected fridge. Is there actually some beneficial feature that makes it worth connecting at all?
The right french door is hard to close compared to our last side by side fridge. For now it helps me remember to close it when I’m in a different room and can’t hear the alarm.
Problem: Right french door is hard to close and user often leaves it open. User does not hear alarm.
Solution 1: Make french door easier to close / close automatically.
Solution 2: Make alarm louder. Adjustable even.
Solution 3: Add networked computer, software, mobile phone application, and wire them all up.
Just looking at the readme sample code it appears to be using APIs unavailable in iOS, so where is the vulnerability?
It's just marked as unavailable. Apple does that to try keeping people from using XPC on iOS. Use the full code from GitHub, it has a bypass for that Xcode check
Earlier quoted context omitted.
The right french door is hard to close compared to our last side by side fridge. For now it helps me remember to close it when I’m in a different room and can’t hear the alarm.
That is hilarious. Problem: Right french door is hard to close and user often leaves it open. User does not hear alarm. Solution 1: Make french door easier to close / close automatically. Solution 2: Make alarm louder. Adjustable even. Solution 3: Add networked computer, software, mobile phone application, and wire them all up.
French door fridges have this flat piece that slides behind one of the doors to make it airtight. Our previous place had a Samsung that did the same thing, except it was the left door and easier to shut.
It’s made by Germans, they don’t always make things usable or even serviceable (German cars).