Live data from Hacker News

iOS Single App Mode Escape

labs.withsecure.com

21–30 of 52 posts

Re: iOS Single App Mode Escape

#21
> Features like Guided Access and Restrictions are designed to provide parents and system administrators with the tools to discourage violations of policy by legitimate users.

Guided Access is buggy crap. I’ve seen children break out of Guided Access. I also regularly need to completely reboot an iPad to get Guided Access to work at all.

Re: iOS Single App Mode Escape

#22

Earlier quoted context omitted.

They right clicked and pressed view source. I’m just surprised they let them out after committing such an heinous act…

You joke, but something like that is a terrifying possibility considering where things like device-attestation is headed, combined with a lack of understanding of the technology, especially the local level (e.g. I'm sure probably most of us here on HN got into trouble in elementary-school for "breaking the computers" or similar - I don't expect a local provincial magistrate to be any more understanding-of-things than…

> I'm sure probably most of us here on HN got into trouble in elementary-school for "breaking the computers" or similar

Oh, so, _so_ many times

Re: iOS Single App Mode Escape

#23
post #12

I get the desire to be compensated for the work that went into reproducing the Guided Access escape, but I have to agree that this is not a security issue. Guided Access controls are in the Accessibility settings. Apple has marketed the feature as one of convenience. And I think a hard reboot, at least this used to be true, will also exit the mode. (Hold power and home button or power and volume button combo.)

> a hard reboot, at least this used to be true, will also exit the mode.

Reboot "exit" to the passcode entry screen is less bad than the unlocked phone in this escape.

Re: iOS Single App Mode Escape

#24

Earlier quoted context omitted.

How's that? I wasn't a Mac user back then (except in school), but IBM-compatible PCs were still a headache back then. I over-applied thermal paste and misconfigured `config.sys` or set the wrong COM port baud rates more times than I can count...

MacOS 9 was a dog's breakfast of an OS. OS X wasn't released until 2001, so until then all those Mac users were forced to run a cooperatively schedulding OS without even protected memory (!!). A typical PowerMactinosh's uptime was measured in the single-digit hours, not the weeks you'd get from NT, or months for a Unix box. ...there's no excuse for that given Apple's vertical-integration.

That's all true, but nonetheless it was a ton of fun for those of us who were into desktop customization at the time. With how system extensions worked in Classic Mac OS (they could overwrite bits of the system in memory) there was practically nothing they couldn't do, and as a result it was one of the most effortlessly extensively customizable desktops to ever exist. Even 22 years later, in some ways Linux, the long reigning champion of customizability, has yet to beat it.

Of course, that extension model was hilariously insecure and wouldn't have worked in the modern era, but it had its perks.

Re: iOS Single App Mode Escape

#25

Earlier quoted context omitted.

You joke, but something like that is a terrifying possibility considering where things like device-attestation is headed, combined with a lack of understanding of the technology, especially the local level (e.g. I'm sure probably most of us here on HN got into trouble in elementary-school for "breaking the computers" or similar - I don't expect a local provincial magistrate to be any more understanding-of-things than…

> I'm sure probably most of us here on HN got into trouble in elementary-school for "breaking the computers" or similar Oh, so, _so_ many times

I got expelled from high school for holding down shift while booting a windows machine, pre -98. Also suspended (the next year) because someone edited a teacher's gradebook in the "Mac lab" that he left open on an SE; of course the hacker that was expelled the year before obviously edited a single grade for someone they didn't know in a teacher they'd never met.

And I went to a Tech. Magnet. HS

Re: iOS Single App Mode Escape

#26

Earlier quoted context omitted.

They right clicked and pressed view source. I’m just surprised they let them out after committing such an heinous act…

You joke, but something like that is a terrifying possibility considering where things like device-attestation is headed, combined with a lack of understanding of the technology, especially the local level (e.g. I'm sure probably most of us here on HN got into trouble in elementary-school for "breaking the computers" or similar - I don't expect a local provincial magistrate to be any more understanding-of-things than…

I received a 3 day In School Suspension during the 7th grade for "breaking" one of the computers in the library/school computer lab. What I had done was change the color scheme of the task bar/windows.

Made even more ridiculous by the fact that the computers had ephemeral drives and would re-image when they were restarted.

Re: iOS Single App Mode Escape

#27
post #4

Part of me wishes that Apple would license out iOS and macOS; and the chips they run on; for the specific purposes of embedded and industrial development. A MacBook, as good as it is for Office work, simply is not suitable on the construction site. If macOS was, say, licensed to Panasonic for their Toughbook line and it was only available to commercial customers, that would be a better arrangement. Or, another exampl…

I would hate to see this. That's essentially what the PC and Android markets are like, which are both full of shitty manufacturers making poorly supported throwaway hardware. The IoT market is even worse. Coming from Wintel, the vertical integration of Apple is a dream by comparison. Never had a single hour of downtime, compared to all the reformats and driver reinstalls and registry hacks and display glitches and su…

Its a fair opinion to have, but I feel that anyone who still thinks this way simply hasn't used Windows on a MacBook-priced device in recent history. Are MacBooks better? In many ways, sure, absolutely. Even at Macbook-priced territory, there are wrong machines to buy; shopping for a Mac is far easier. Windows still comes with a lot of ad-driven apps that I won't use (compared to the Mac, which also comes with a ton of apps I won't use, but at least they're well-intentioned). Battery is in another universe.

Performance? The benchmarks say the Mac is in another class. There are plenty of use-cases that can leverage it. I can't; Windows is absolutely higher performance for my use-cases. Maybe its the animations. Maybe its Rosetta, as great as it is? Its definitely Counter-Strike 2 removing Mac support; its definitely Nvidia hardware acceleration in CAD applications. People use their computers in different ways; not everyone is viewing 8 streams of 4K RAW footage in their video editor.

Re: iOS Single App Mode Escape

#28
post #26

Earlier quoted context omitted.

You joke, but something like that is a terrifying possibility considering where things like device-attestation is headed, combined with a lack of understanding of the technology, especially the local level (e.g. I'm sure probably most of us here on HN got into trouble in elementary-school for "breaking the computers" or similar - I don't expect a local provincial magistrate to be any more understanding-of-things than…

I received a 3 day In School Suspension during the 7th grade for "breaking" one of the computers in the library/school computer lab. What I had done was change the color scheme of the task bar/windows. Made even more ridiculous by the fact that the computers had ephemeral drives and would re-image when they were restarted.

I wrote a dos cli simulator that simulated an empty PC and added it to autoexec.bat.

The lab teacher didn’t figure it out and wiped every desktop and reinstalled deleting everything on them.

I felt slightly bad. Slightly.

Re: iOS Single App Mode Escape

#29

Earlier quoted context omitted.

MacOS 9 was a dog's breakfast of an OS. OS X wasn't released until 2001, so until then all those Mac users were forced to run a cooperatively schedulding OS without even protected memory (!!). A typical PowerMactinosh's uptime was measured in the single-digit hours, not the weeks you'd get from NT, or months for a Unix box. ...there's no excuse for that given Apple's vertical-integration.

That's all true, but nonetheless it was a ton of fun for those of us who were into desktop customization at the time. With how system extensions worked in Classic Mac OS (they could overwrite bits of the system in memory) there was practically nothing they couldn't do, and as a result it was one of the most effortlessly extensively customizable desktops to ever exist. Even 22 years later, in some ways Linux, the long…

This was popular on Amiga as well, although maybe less clean and "officially supported" compared to Mac OS system extensions. There were Amiga utilities that remapped OS system calls to custom functions with performance optimizations, enhanced functionality, or different behavior altogether.

The 68000 series CPUs didn't have an MMU built-in until the 68030, which I guess was far too late to see much use in consumer OSes. Pretty shocking that the jump to PPC wasn't enough for Apple to take care of that stuff, but I guess that was going to be Copland before it was canned. At least Amiga had preemptive multitasking from the beginning.

Re: iOS Single App Mode Escape

#30
post #12

I get the desire to be compensated for the work that went into reproducing the Guided Access escape, but I have to agree that this is not a security issue. Guided Access controls are in the Accessibility settings. Apple has marketed the feature as one of convenience. And I think a hard reboot, at least this used to be true, will also exit the mode. (Hold power and home button or power and volume button combo.)

> a hard reboot, at least this used to be true, will also exit the mode. Reboot "exit" to the passcode entry screen is less bad than the unlocked phone in this escape.

Two comments on that:

1) I wonder if the exploit here works with passcode lock on? I suspect it does not, because there’s no mention of passcode entry in the steps.

2) My rebuttal was going to be ‘but most kiosk devices don’t allow access to the power button’ - but this exploit requires that too.

Post reply on HN