Stories
Slash Boxes
Comments

SoylentNews is people

posted by martyb on Tuesday September 18 2018, @09:16AM   Printer-friendly
from the and-others dept.

Submitted via IRC for Fnord666

A security researcher has found a new way to crash and restart any iPhone — with just a few lines of code. Sabri Haddouche tweeted a proof-of-concept webpage with just 15 lines of code.

Sabri Haddouche tweeted a proof-of-concept webpage with just 15 lines of code which, if visited, will crash and restart an iPhone or iPad. Those on macOS may also see Safari freeze when opening the link.

Source: https://techcrunch.com/2018/09/15/a-new-css-based-web-attack-will-crash-and-restart-your-iphone/


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 4, Insightful) by FatPhil on Tuesday September 18 2018, @11:58AM (4 children)

    by FatPhil (863) <reversethis-{if.fdsa} {ta} {tnelyos-cp}> on Tuesday September 18 2018, @11:58AM (#736465) Homepage
    Crossing protection boundaries is (artificially) expensive. So lump everything into one protection domain, /et voila/ fast and fragile!

    Alternatively, you could just approach the concepts of inter/intra-task/driver/kernel protection from a new perspective, and do something like The Mill Architecture: https://millcomputing.com/docs/#security
    --
    Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves
    Starting Score:    1  point
    Moderation   +2  
       Insightful=2, Total=2
    Extra 'Insightful' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   4  
  • (Score: 1, Interesting) by Anonymous Coward on Tuesday September 18 2018, @04:07PM (2 children)

    by Anonymous Coward on Tuesday September 18 2018, @04:07PM (#736575)

    I would argue that an OS meant to run on a smallish battery has particular tradeoffs.
    You can't ignore computing overhead like you can on a big laptop or desktop. Keeping it leaner is more justifiable.
    And for what it's worth, my iPhone has never brought down the OS from a bad webpage. It has always been the browser crashing and restarting *the browser*. This is an amazing stability record. The CSS bug is the only bug of its type I have heard about.

    • (Score: 0) by Anonymous Coward on Tuesday September 18 2018, @06:20PM (1 child)

      by Anonymous Coward on Tuesday September 18 2018, @06:20PM (#736634)

      Whenever there's a problem, you fanbois evoke the SJRDF, and spin it has a the exception that proves the INSANELY GREAT nature of Apple products.

      Come on, man. Just say it: This is a terrible bug; Apple screwed up, and will hopefully do better in the future.

      • (Score: 0) by Anonymous Coward on Wednesday September 19 2018, @02:02AM

        by Anonymous Coward on Wednesday September 19 2018, @02:02AM (#736884)

        It is a critical bug that must be fixed immediately.
        That does nothing to negate the very stable experience I have had with my iPhone.

  • (Score: 1, Offtopic) by MichaelDavidCrawford on Tuesday September 18 2018, @08:53PM

    by MichaelDavidCrawford (2339) Subscriber Badge <mdcrawford@gmail.com> on Tuesday September 18 2018, @08:53PM (#736725) Homepage Journal

    TI RTOS Kernel has no concept of memory mapping. Everything runs in physical memory

    This is very common: MMUs are expensive, take up lots of silicon real estate, consume power, produce heat and use lots of memory

    Yes it takes memory to map memory. It's not uncommon for memory protected kernels to have a gig of page tables. That's why the Linux kernel mailing list is so full of discussions about reducing memory fragmentation: two discontinuous memory mappings will consume two page table entries

    I do embedded and drivers because my clients are happy to give me all the time and money I require to get all the bugs out. My GUI client's were never that way

    --
    Yes I Have No Bananas. [gofundme.com]