zlacker

[return to "'Text bomb' is latest Apple bug"]
1. devit+G8[view] [source] 2018-01-18 16:00:43
>>Harvey+(OP)
Based on a web search, https://bogdanz.me/work/diddu.html might be a working mirror of the proof of concept.

It appears to contain a 10MB long UTF-8 mess in both the og:title meta content and in a mailto: link.

I'd guess it's supposed to crash iOS apps by either posting that link if it displays links in a thumbnail element using og:title or otherwise by pasting the huge mailto link contained in the webpage, or perhaps only the e-mail address.

◧◩
2. Someon+6i[view] [source] 2018-01-18 16:59:28
>>devit+G8
That site caused Firefox 57 (64bit) to lock up on Windows 10...

It is an i7, 16 GB total (7 GB free), and an SSD.

◧◩◪
3. aluhut+fp[view] [source] 2018-01-18 17:32:32
>>Someon+6i
It didn't completely lock up on W7 FF 57.

The lock ups came in waves but was able to close the tab when it was unlocked.

[go to top]