Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

A new CSS-based web attack will crash and restart your iPhone

techcrunch.com

Post reply on HN
Print view View original

131–140 of 140 posts

Re: A new CSS-based web attack will crash and restart your iPhone

#131

Post by tomxor »

Eric_WVGG wrote: post #104

This reminds me of how I was unemployed for a good chunk of the year 2001. I was making a fresh start in a new city, and shopping my resumé to various graphics design firms. There was a prominent link to my portfolio site up top. After months of looking I didn’t get a single call-back. Eventually I got a job in another industry, and noticed a bunch of Macs in the corner that they used for testing. One day I decided t…

In my first commercial attempt at web development I utilised a png transparency fix for IE6 (written in that IE6 specific filter thing). A few months later the client passed on a complaint from one of his customers whom's machine crashed whenever he visited the website... I removed the IE6 fix and all was well in the world - You can have nice things or MS, you can't have both.

Re: A new CSS-based web attack will crash and restart your iPhone

#132

Post by MBCook »

swingline-747 wrote: post #128
MBCook wrote: post #85

Earlier quoted context omitted.

It does. Your app will get killed. The OS will be fine. My understanding is this bug uses up GPU memory/contexts, not normal system RAM, and that’s why it becomes an issue.

Ohh.. sneaky: a GPU DoS.

Yeah. Of course it shouldn’t be possible, but I guess no one had thought of it before or they thought the risk was too low because they figured you’d have to make an app to do it not some random HTML on a webpage.

Re: A new CSS-based web attack will crash and restart your iPhone

#133

Post by givinguflac »

andrethegiant wrote: post #123
joering2 wrote: post #22

Earlier quoted context omitted.

DO NOT CLICK THE LINK! Hour later I am still unable to restart my phone. It hangs on logo!! This may be a permanent fuck ;( unsure exact version but I have iOS 7 that hasnt been updated in about six months.

If you use iCloud for Safari, you can close another device's Safari tab from your Mac. click the iCloud tabs icon on desktop Safari, then click the circle-x to close the offending tab.

This is a great suggestion for those stuck on this crash

Re: A new CSS-based web attack will crash and restart your iPhone

#134

Post by sizzle »

Eric_WVGG wrote: post #104

This reminds me of how I was unemployed for a good chunk of the year 2001. I was making a fresh start in a new city, and shopping my resumé to various graphics design firms. There was a prominent link to my portfolio site up top. After months of looking I didn’t get a single call-back. Eventually I got a job in another industry, and noticed a bunch of Macs in the corner that they used for testing. One day I decided t…

On the bright side, you are probably making 2-4x the salary of a graphic designer in today's market if you learned to code...

Re: A new CSS-based web attack will crash and restart your iPhone

#135

Post by Eric_WVGG »

sizzle wrote: post #134
Eric_WVGG wrote: post #104

This reminds me of how I was unemployed for a good chunk of the year 2001. I was making a fresh start in a new city, and shopping my resumé to various graphics design firms. There was a prominent link to my portfolio site up top. After months of looking I didn’t get a single call-back. Eventually I got a job in another industry, and noticed a bunch of Macs in the corner that they used for testing. One day I decided t…

On the bright side, you are probably making 2-4x the salary of a graphic designer in today's market if you learned to code...

I knew how to code in the first place. At the time, I was dismayed by the inability for most software developers to take UX/UI seriously, and decided that "the way forward" was to work with design professionals instead of being inside a party that was ostensibly on the same team but usually fought against designers.

Since then, the world has changed… some design firms have transitioned to be purely marketers, others just hire development firms that are happy to defer all UX to their partners, and others still have transitioned to be UX/UI design firms.

Re: A new CSS-based web attack will crash and restart your iPhone

#137

Post by brennebeck »

tomxor wrote: post #131
Eric_WVGG wrote: post #104

This reminds me of how I was unemployed for a good chunk of the year 2001. I was making a fresh start in a new city, and shopping my resumé to various graphics design firms. There was a prominent link to my portfolio site up top. After months of looking I didn’t get a single call-back. Eventually I got a job in another industry, and noticed a bunch of Macs in the corner that they used for testing. One day I decided t…

In my first commercial attempt at web development I utilised a png transparency fix for IE6 (written in that IE6 specific filter thing). A few months later the client passed on a complaint from one of his customers whom's machine crashed whenever he visited the website... I removed the IE6 fix and all was well in the world - You can have nice things or MS, you can't have both.

I think MS is doing a pretty decent job of trying to repair that. Especially with developers.

Re: A new CSS-based web attack will crash and restart your iPhone

#138

Post by dang »

Froyoh wrote: post #81
Avamander wrote: post #62

Earlier quoted context omitted.

Linux and its maintainers. LineageOS and its maintainers.

Ah you're one of those guys.

We've banned this account for repeatedly breaking the site guidelines. If you don't want to be banned, you're welcome to email hn@ycombinator.com and give us reason to believe that you'll follow the rules in the future.

https://news.ycombinator.com/newsguidelines.html

Re: A new CSS-based web attack will crash and restart your iPhone

#139

Post by saagarjha »

swingline-747 wrote: post #130
comex wrote: post #50

Earlier quoted context omitted.

Just to clarify the situation: fulafel’s comment (parent^4 of this comment) is incorrect. iOS does not automatically reboot when Safari or WebProcess crashes, and Safari is not generally treated as a ‘privileged component’ overall – to the contrary, last I checked it had a tighter sandbox than most apps. As people have noted, Safari does have special privileges to run a JIT, which is otherwise restricted. This is not…

To explain to other readers: JIT processes usually have to violate the standard W^X protection rule for memory pages by either simultaneously mapping them to both data and code virtual pages, or remapping them before&after JIT compilation. I'd hope it's the latter. JITs are basically compiler-linkers directly to memory, so need to have their output transformed from data pages into code page in order for it to be exec…

Safari does MAP_JIT, I believe, so it keeps around RWX pages (edit: I think just one page). The best third-party apps can do (on non-jailbroken devices) is W^X–that is, map memory as RW, put code on it, then remap it as RX–because they cannot gain the dynamic-codesigning entitlement. Even this requires jumping through hoops, such as its own set of entitlements and specific setup dance, which makes it not available to App Store apps.
Post reply on HN