Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

A new CSS-based web attack will crash and restart your iPhone

techcrunch.com

Post reply on HN
Print view View original

61–70 of 140 posts

Re: A new CSS-based web attack will crash and restart your iPhone

#62

Post by Avamander »

askmike wrote: post #56
novaRom wrote: post #51

I've stopped accepting iOS/OSX seriously after those iCloud celebs leaks and especially after 'empty string' root prompt bug. How anyone can still trust this black box concept.

So what do you trust? Google?

Linux and its maintainers. LineageOS and its maintainers.

Re: A new CSS-based web attack will crash and restart your iPhone

#64

Post by myfonj »

Dug through WebKit Bugzilla and Trac and the only recent visible "crash backdrop" issue seems to be "Fix crash when reflections and backdrop filter are combined" [1], which references bug that requires authorization [2].

[1] https://trac.webkit.org/changeset/235475/webkit [2] https://bugs.webkit.org/show_bug.cgi?id=188504

Re: A new CSS-based web attack will crash and restart your iPhone

#65

Post by [deleted] »

Crontab wrote: post #60
tannhaeuser wrote: post #25

Earlier quoted context omitted.

Seems like on restart Safari wants to revisit previously opened pages and crashes again ad infinitum. Isn't there a way to cold-restart iOS devices or some such (like the magic "Zap NVRAM and repair permissions" procedure back in PowerMac times)?

"Seems like on restart Safari wants to revisit previously opened pages" I've always found that behavior annoying. If I want to revisit the last page, I can find it in history.

[deleted]

Re: A new CSS-based web attack will crash and restart your iPhone

#66

Post by runeks »

avip wrote: post #10
matthberg wrote: post #3

The tweet announcing it: https://twitter.com/pwnsdx/status/1040944750973595649 The code that causes the crash (safe to open): https://gist.github.com/pwnsdx/ce64de2760996a6c432f06d612e33... The demo itself (causes crash): https://cdn.rawgit.com/pwnsdx/ce64de2760996a6c432f06d612e33a...

It works!

I clicked the third link thinking it was a link to a demo video. I can confirm that 1) it’s not a link to a demo video 2) it rebooted my iPad.

Re: A new CSS-based web attack will crash and restart your iPhone

#67

Post by matkins »

Crontab wrote: post #60
tannhaeuser wrote: post #25

Earlier quoted context omitted.

Seems like on restart Safari wants to revisit previously opened pages and crashes again ad infinitum. Isn't there a way to cold-restart iOS devices or some such (like the magic "Zap NVRAM and repair permissions" procedure back in PowerMac times)?

"Seems like on restart Safari wants to revisit previously opened pages" I've always found that behavior annoying. If I want to revisit the last page, I can find it in history.

I'm sure you're in the absolute minority. Most people want all apps, including the browser, to stay the way they were when they closed them, even after a reboot

Re: A new CSS-based web attack will crash and restart your iPhone

#68

Post by rangibaby »

endless1234 wrote: post #18
exikyut wrote: post #7

This is basically 3,485 nested s (balanced; same number of s) with width and height both set to 10,000px. I have no idea is this is an internal DOM overflow or it's because of the tiled background-image. (I don't have an iPhone to test against.) EDIT: I actually read the article properly :) all 3,485 the have a 10px backdrop-filter set on them. > He explained that nesting a ton of elements — such as tags — inside a b…

It's because of the nested backdrop-filters being applied. I would've thought the css parser / rendering engine stops this from happening, but apparently not.

I guess it is because backdrop-filter is a new property. AFAIK backdrop-filter affects everything everything below it, so maybe a sanity check for the number of times the effect applies is missing.
Post reply on HN