zlacker

[return to "'Text bomb' is latest Apple bug"]
1. menaci+q9[view] [source] 2018-01-18 16:05:59
>>Harvey+(OP)
The linked blog assures people that this can't be used to access data. Once something is crashing an app/OS, can you really say that? I mean, can you be sure there's no one clever enough to capitalize on the underlying software error leading to this state?
◧◩
2. anyfoo+kc[view] [source] 2018-01-18 16:23:21
>>menaci+q9
Don’t know any details about this one, but some bugs are just not exploitable beyond denial of service. If all you can do is provoke an action that makes the OS kill the process immediately, for example. Like a null pointer dereference under the right circumstances.
◧◩◪
3. menaci+Ff[view] [source] 2018-01-18 16:43:42
>>anyfoo+kc
That's kind of what I was thinking, but it sounds like you or I know about as much about the cause of the bug as the person offering assurances.
[go to top]