Live data from Hacker News

A new CSS-based web attack will crash and restart your iPhone

techcrunch.com

101–110 of 140 posts

Re: A new CSS-based web attack will crash and restart your iPhone

#102
post #11

Earlier quoted context omitted.

It also crashes chrome on iphone.

The underlying browser for chrome on iOS is still safari. The same is true for every other browser.

Which is weird though, I had a few sites not render properly on Edge on iOS but did on Safari. Some kind of compatibility mode?

Re: A new CSS-based web attack will crash and restart your iPhone

#103
post #67
post #60

Earlier quoted context omitted.

"Seems like on restart Safari wants to revisit previously opened pages" I've always found that behavior annoying. If I want to revisit the last page, I can find it in history.

I'm sure you're in the absolute minority. Most people want all apps, including the browser, to stay the way they were when they closed them, even after a reboot

I'm in that minority too, I guess. There's nothing more grating than to explicitly close all tabs, only to be asked whether you want to open them again. For me, tabs are like this useless plaque that slowly accumulates and needs to be blown away every two or three days.

Re: A new CSS-based web attack will crash and restart your iPhone

#104
This reminds me of how I was unemployed for a good chunk of the year 2001.

I was making a fresh start in a new city, and shopping my resumé to various graphics design firms. There was a prominent link to my portfolio site up top. After months of looking I didn’t get a single call-back.

Eventually I got a job in another industry, and noticed a bunch of Macs in the corner that they used for testing. One day I decided to load my portfolio site for fun... turned out there was a glitch in CSS support in Internet Explorer that would crash the browser, and since this was Mac OS “Classic”, that took down the entire machine.

Graphic design firms were all still on Macs with the old OS back in those days; I had been walking around crashing computers and destroying people’s work for months.

Re: A new CSS-based web attack will crash and restart your iPhone

#107
This isn't just an iOS bug. The affected CSS property is just not available on most platforms.

Sinfe I do not have access to any apple hardware, I tried turning on the experimental web features in Chrome Canary on my phone and it managed to freeze Android as well. The Chrome browser crashed on Windows with this setting on. Microsoft Edge, the only browser other than Safari to have support this property without messing with config, just showed a generic "this page can not be displayed" message.

I think this problem affects the entire WebKit/Blink code base, the only reason the crashes are not being detected on other platforms is that most browsers just don't support this feature yet.

Re: A new CSS-based web attack will crash and restart your iPhone

#108

How is it that browserland always seems to impact the OS? Is it the browser's need for graphics drivers? Or are these browsers embedded at a different level compared to a traditional OS?

What other apps do you have on your phone that are executing what is essentially an enormous amount of untrusted code?

There is nothing different about browsers than other apps, but given how they work people are far more likely to discover these kinds of bugs in browsers.

Re: A new CSS-based web attack will crash and restart your iPhone

#109
post #70
post #19

It also gets my Macbook Pro in an unresponsive state (using Safari).

Copy that. I had to hard reset. (No crash while using Firefox, Chrome & Vivaldi).

Those browsers don’t support those CSS filters yet, you’d have to do chrome canary for example. Another poster tested with the features enabled and got the same crash.
Post reply on HN