Live data from Hacker News

iOS Single App Mode Escape

labs.withsecure.com

31–40 of 52 posts

Re: iOS Single App Mode Escape

#31
post #12

I get the desire to be compensated for the work that went into reproducing the Guided Access escape, but I have to agree that this is not a security issue. Guided Access controls are in the Accessibility settings. Apple has marketed the feature as one of convenience. And I think a hard reboot, at least this used to be true, will also exit the mode. (Hold power and home button or power and volume button combo.)

[dead]

Re: iOS Single App Mode Escape

#32
post #27
post #4

Earlier quoted context omitted.

I would hate to see this. That's essentially what the PC and Android markets are like, which are both full of shitty manufacturers making poorly supported throwaway hardware. The IoT market is even worse. Coming from Wintel, the vertical integration of Apple is a dream by comparison. Never had a single hour of downtime, compared to all the reformats and driver reinstalls and registry hacks and display glitches and su…

Its a fair opinion to have, but I feel that anyone who still thinks this way simply hasn't used Windows on a MacBook-priced device in recent history. Are MacBooks better? In many ways, sure, absolutely. Even at Macbook-priced territory, there are wrong machines to buy; shopping for a Mac is far easier. Windows still comes with a lot of ad-driven apps that I won't use (compared to the Mac, which also comes with a ton…

[deleted]

Re: iOS Single App Mode Escape

#33
post #27
post #4

Earlier quoted context omitted.

I would hate to see this. That's essentially what the PC and Android markets are like, which are both full of shitty manufacturers making poorly supported throwaway hardware. The IoT market is even worse. Coming from Wintel, the vertical integration of Apple is a dream by comparison. Never had a single hour of downtime, compared to all the reformats and driver reinstalls and registry hacks and display glitches and su…

Its a fair opinion to have, but I feel that anyone who still thinks this way simply hasn't used Windows on a MacBook-priced device in recent history. Are MacBooks better? In many ways, sure, absolutely. Even at Macbook-priced territory, there are wrong machines to buy; shopping for a Mac is far easier. Windows still comes with a lot of ad-driven apps that I won't use (compared to the Mac, which also comes with a ton…

I have yet to find a portable windows machine that doesn’t throttle performance on battery. Weird that no reviewers ever mention it but Macs have nearly no performance difference and they plugged in vs on battery and that’s a huge reason I don’t trust using any Windows laptops on the move.

Re: iOS Single App Mode Escape

#34
post #30

Earlier quoted context omitted.

> a hard reboot, at least this used to be true, will also exit the mode. Reboot "exit" to the passcode entry screen is less bad than the unlocked phone in this escape.

Two comments on that: 1) I wonder if the exploit here works with passcode lock on? I suspect it does not, because there’s no mention of passcode entry in the steps. 2) My rebuttal was going to be ‘but most kiosk devices don’t allow access to the power button’ - but this exploit requires that too.

[dead]

Re: iOS Single App Mode Escape

#35

Part of me wishes that Apple would license out iOS and macOS; and the chips they run on; for the specific purposes of embedded and industrial development. A MacBook, as good as it is for Office work, simply is not suitable on the construction site. If macOS was, say, licensed to Panasonic for their Toughbook line and it was only available to commercial customers, that would be a better arrangement. Or, another exampl…

Apple did that once, and then changed their mind. I suspect they think it degrades their brand.

They don't even let the owners of their iphones run their own software without asking permission.

Re: iOS Single App Mode Escape

#36

Part of me wishes that Apple would license out iOS and macOS; and the chips they run on; for the specific purposes of embedded and industrial development. A MacBook, as good as it is for Office work, simply is not suitable on the construction site. If macOS was, say, licensed to Panasonic for their Toughbook line and it was only available to commercial customers, that would be a better arrangement. Or, another exampl…

https://en.wikipedia.org/wiki/Power_Computing_Corporation

> Heck, if I'm really dreaming... a stripped-down iOS specifically for IoT devices could be a huge, huge market.

That’s effectively what runs the HomePods and AppleTV.

Re: iOS Single App Mode Escape

#37
post #4

Part of me wishes that Apple would license out iOS and macOS; and the chips they run on; for the specific purposes of embedded and industrial development. A MacBook, as good as it is for Office work, simply is not suitable on the construction site. If macOS was, say, licensed to Panasonic for their Toughbook line and it was only available to commercial customers, that would be a better arrangement. Or, another exampl…

I would hate to see this. That's essentially what the PC and Android markets are like, which are both full of shitty manufacturers making poorly supported throwaway hardware. The IoT market is even worse. Coming from Wintel, the vertical integration of Apple is a dream by comparison. Never had a single hour of downtime, compared to all the reformats and driver reinstalls and registry hacks and display glitches and su…

>I would hate to see this.

Why? You could still buy the real thing. This would not detract anything from your user experience.

Re: iOS Single App Mode Escape

#38

Earlier quoted context omitted.

They right clicked and pressed view source. I’m just surprised they let them out after committing such an heinous act…

You joke, but something like that is a terrifying possibility considering where things like device-attestation is headed, combined with a lack of understanding of the technology, especially the local level (e.g. I'm sure probably most of us here on HN got into trouble in elementary-school for "breaking the computers" or similar - I don't expect a local provincial magistrate to be any more understanding-of-things than…

In 1991 I got suspended from middle school for "putting a virus on the computer so it would not turn on".

(What I actually did was turn off the power switch on the power strip, rather than on the computer.)

Re: iOS Single App Mode Escape

#39
post #38

Earlier quoted context omitted.

You joke, but something like that is a terrifying possibility considering where things like device-attestation is headed, combined with a lack of understanding of the technology, especially the local level (e.g. I'm sure probably most of us here on HN got into trouble in elementary-school for "breaking the computers" or similar - I don't expect a local provincial magistrate to be any more understanding-of-things than…

In 1991 I got suspended from middle school for "putting a virus on the computer so it would not turn on". (What I actually did was turn off the power switch on the power strip, rather than on the computer.)

In 1988 I got in terrible trouble for changing the BIOS settings and "destroying a computer" at my school. I had wheedled all the admin passwords out of the computer teacher's son and then used them to cause all sorts of "fun."

I think I had simply changed the computer so it booted from a different device, and it would have taken about five seconds to change it back...

Re: iOS Single App Mode Escape

#40

When I was in jail they had kiosks to order commissary snacks. I managed to take advantage of a race condition to crash out of the app onto the desktop. Typing was a pain because you had to use the on-screen keyboard, and I would only have a few minutes before a crowd of detainees would appear and start squawking excitedly, hoping that I could access their Facebook accounts for them, and drawing the attention of the…

I love reading comments like this, but I admit I'm always pretty curious how the poster ended up in jail. Care to share what your conviction was for?

I should make a clarification: "jail" in the correctional context refers to pre-trial detention, as opposed to "prison" which is post-trial conviction housing. This distinction doesn't happen in the real world :)

So, to answer you question, I did 10 years locked up without conviction. No trial yet. Maybe one day?

Post reply on HN