Live data from Hacker News

A new CSS-based web attack will crash and restart your iPhone

techcrunch.com

91–100 of 140 posts

Re: A new CSS-based web attack will crash and restart your iPhone

#91
post #28

Earlier quoted context omitted.

The underlying browser for chrome on iOS is still safari. The same is true for every other browser.

...however Chrome does not have the same privileges to run accelerated js on iOS that Safari does. Interestingly though this attack has nothing to do with javascript.

If they finally switched from the deprecated UIWebView to WKWebView, then chrome too gets to run JS at safari's speed. WKWebView runs out of process and thus can have the JIT entitlements.

Re: A new CSS-based web attack will crash and restart your iPhone

#92

Is this due to memory exhaustion? If so, does Safari not have limits applied that cause it to be killed for running into OOM?

> If so, does Safari not have limits applied that cause it to be killed for running into OOM? It does. The memory allocation that causes the crash doesn't come from Safari, though: it's a memory allocation in the kernel (likely somewhere graphics related), and that counts towards XNU's memory consumption and not Safari's.

Ahh thank you!

Re: A new CSS-based web attack will crash and restart your iPhone

#93
post #85

Earlier quoted context omitted.

Does iOS not enforce reasonable memory limits on apps to prevent a panic?

It does. Your app will get killed. The OS will be fine. My understanding is this bug uses up GPU memory/contexts, not normal system RAM, and that’s why it becomes an issue.

Ahh thank you :)

Re: A new CSS-based web attack will crash and restart your iPhone

#95

Earlier quoted context omitted.

I sure as heck want my tabs back. But I'd settle for "restore tabs" as I have to do that a lot in chrome on my MacBook Pro. On my Android, the tabs are just there and I really appreciate it. I have over a dozen tabs open on my phone and two dozen on my laptop.

It’s very convenient, but isn’t that scenario better covered by hibernating the os? That covers all app and doesn’t require any app to have special behaviour coded in

If I never had to restart, sure. I have to restart my laptop weekly at least. Heck, it locked up twice last week opening Diablo 3 forcing a hard power cycle. My phone gets restarted less often but still gets into odd states where a reboot is needed.

Re: A new CSS-based web attack will crash and restart your iPhone

#96
It’s cruel of them to make this discovery public without a fix.

Thousands upon thousands of normal, non-tech, non-fanatic people are going to be sent a link to this page by someone mean who wants to crash their phone and laugh at their pain as they’re locked out of their life by a crash bug.

This is irresponsible disclosure.

Re: A new CSS-based web attack will crash and restart your iPhone

#97
post #10

Earlier quoted context omitted.

It works!

More details from the Twitter thread: it's iOS 7 and up, and it also works on watchOS 5. In some apps like chrome or opera it isn't a full crash, just a "springboard crash".

I always said iOS 7 was a disaster. iOS 6- opened 8 tabs at most (deleting old tabs) and no one complained. These new youngster oses can not even manage memory in a right way — now with all these GCs no one knows how to do it.

Re: A new CSS-based web attack will crash and restart your iPhone

#98

It’s cruel of them to make this discovery public without a fix. Thousands upon thousands of normal, non-tech, non-fanatic people are going to be sent a link to this page by someone mean who wants to crash their phone and laugh at their pain as they’re locked out of their life by a crash bug. This is irresponsible disclosure.

Rebooting phone doesn't look like a tragedy.

Re: A new CSS-based web attack will crash and restart your iPhone

#99

It’s cruel of them to make this discovery public without a fix. Thousands upon thousands of normal, non-tech, non-fanatic people are going to be sent a link to this page by someone mean who wants to crash their phone and laugh at their pain as they’re locked out of their life by a crash bug. This is irresponsible disclosure.

Rebooting phone doesn't look like a tragedy.

https://news.ycombinator.com/item?id=17997958

> DO NOT CLICK THE LINK! Hour later I am still unable to restart my phone. It hangs on logo!! This may be a permanent fuck ;(

Re: A new CSS-based web attack will crash and restart your iPhone

#100

Earlier quoted context omitted.

For me it just closes the Hacker News app. No reboot.

The Hacker News app??

I assume that he means one of the many Hacker News clients available for iOS such as MiniHack [1] or Simple Reader for Hacker News [2].

[1] https://itunes.apple.com/it/app/minihack-hacker-news-client/...

[2] https://itunes.apple.com/us/app/simple-reader-for-hacker-new...

Post reply on HN