Live data from Hacker News

A new CSS-based web attack will crash and restart your iPhone

techcrunch.com

71–80 of 140 posts

Re: A new CSS-based web attack will crash and restart your iPhone

#71
post #67
post #60

Earlier quoted context omitted.

"Seems like on restart Safari wants to revisit previously opened pages" I've always found that behavior annoying. If I want to revisit the last page, I can find it in history.

I'm sure you're in the absolute minority. Most people want all apps, including the browser, to stay the way they were when they closed them, even after a reboot

Do you have data for this? I'm also in the absolute minority

Re: A new CSS-based web attack will crash and restart your iPhone

#72
post #67
post #60

Earlier quoted context omitted.

"Seems like on restart Safari wants to revisit previously opened pages" I've always found that behavior annoying. If I want to revisit the last page, I can find it in history.

I'm sure you're in the absolute minority. Most people want all apps, including the browser, to stay the way they were when they closed them, even after a reboot

Me too. I want a blank page when I open my browser. If I reboot a device, I want nothing but base system running when it restarts.

Re: A new CSS-based web attack will crash and restart your iPhone

#73
post #67
post #60

Earlier quoted context omitted.

"Seems like on restart Safari wants to revisit previously opened pages" I've always found that behavior annoying. If I want to revisit the last page, I can find it in history.

I'm sure you're in the absolute minority. Most people want all apps, including the browser, to stay the way they were when they closed them, even after a reboot

I sure as heck want my tabs back. But I'd settle for "restore tabs" as I have to do that a lot in chrome on my MacBook Pro. On my Android, the tabs are just there and I really appreciate it. I have over a dozen tabs open on my phone and two dozen on my laptop.

Re: A new CSS-based web attack will crash and restart your iPhone

#75

I tried it on my iPhone X and it triggers a kernel panic (agxk_mmu.cpp) when trying to allocate memory for WebKit. It seems it exhausts the memory so fast that it triggers an assertion error somewhere? Screenshot: https://i.imgur.com/6tDr44q.png Full serial console log of the device: https://gist.githubusercontent.com/KenanSulayman/867cc399e97...

Does iOS not enforce reasonable memory limits on apps to prevent a panic?

Re: A new CSS-based web attack will crash and restart your iPhone

#78

Earlier quoted context omitted.

For me it just closes the Hacker News app. No reboot.

The Hacker News app??

I think he means the web browser app. Probably only used for Hacker News. Like a boss.

Re: A new CSS-based web attack will crash and restart your iPhone

#79
post #48

Don't most security researchers wait until it is patched before posting the details of something like this?

Why the downvotes? The guy is a security research, and published a bug that can crash the app or OS (reports in this thread have reported mixed results, and others are saying it may impact OSX as well). The guy goes to Twitter the announce the bug.

Most people that call themselves security researchers will notify the vendor and give them some amount of time before publishing it. He waited 1 day.

My best guess is that since it's just a OS crash, he felt he could release it. But for something that is easy for any website to do, seems like he should have given them some more time.

Re: A new CSS-based web attack will crash and restart your iPhone

#80
post #67

Earlier quoted context omitted.

I'm sure you're in the absolute minority. Most people want all apps, including the browser, to stay the way they were when they closed them, even after a reboot

I sure as heck want my tabs back. But I'd settle for "restore tabs" as I have to do that a lot in chrome on my MacBook Pro. On my Android, the tabs are just there and I really appreciate it. I have over a dozen tabs open on my phone and two dozen on my laptop.

It’s very convenient, but isn’t that scenario better covered by hibernating the os? That covers all app and doesn’t require any app to have special behaviour coded in
Post reply on HN