Slashdot Mirror
Malicious Video Link Can Cause Any iOS Device To Freeze (9to5mac.com)
A new bug in iOS has surfaced that will cause any iOS device to freeze when trying to view a certain .mp4 video in Safari. YouTube channel EverythingApplePro explains the bug in a video titled "This Video Will CRASH ANY iPhone!" 9to5Mac reports: As you'll see in the video below from EverythingApplePro, viewing a certain video in Safari will cause iOS to essentially overload and gradually become unusable. We won't link the infectious video here for obvious reasons, but you can take our word for it when we say that it really does render your device unusable. It's not apparently clear as to why this happens. The likely reason is that it's simply a corrupted video that's some sort of memory leak and when played, iOS isn't sure how to properly handle it, but there's like more to it than that. Because of the nature of the flaw, it isn't specific to a certain iOS build. As you can see in the video below, playing the video on an iPhone running as far back as iOS 5 will cause the device to freeze and become unusable. Interestingly, with iOS 10.2 beta 3, if you let an iPhone affected by the bug sit there for long enough, it will power off and indefinitely display the spinning wheel that you normally see during the shutdown process. If someone sends you the malicious link and you fall for it, this is luckily a pretty easy problem to fix. All you have to do is hard reboot your device. For any iPhone but the iPhone 7, this can be done by long-pressing the power and Home buttons at the same time. The iPhone 7, of course, uses a new non-mechanical Home button. In order to reboot an iPhone 7, you must long-press the power button and volume down button at the same time.
or just load IOS 10... my iPhone 5S freezes all the time now.
this is the link to the video that will crash apple products. Share with all your iFiends. ;)
Anons need not reply. Questions end with a question mark.
Sure, all you have to do is test absolutely every combination of HTML, CSS, JavaScript, SVG, and MP4 streaming configuration you could ever possibly conceive of.
Keep in mind, the MP4 spec is... extensive:
https://en.wikipedia.org/wiki/...
My Other Computer Is A Data General Nova III.
What's great is that you don't need to remove the battery to restart it.
Is that actually a thing? Are there phones that require you to open them up and take out the battery to do a simple hard reset?
it's simply a corrupted video that's some sort of memory leak
Maybe is the browser/player/library to have a memory leak triggered and exploited by means of a specially crafted video file!
ah!
Sent as ripples into the electromagnetic field. No single photon has been harmed in the process.
What's great is that you don't need to remove the battery to restart it.
Is that actually a thing? Are there phones that require you to open them up and take out the battery to do a simple hard reset?
It's not really a thing, but in many devices taking the battery out is much faster than holding down a set combination of buttons for quite a long time and hoping no one bumps you along the way.
Plus there's nothing like being 100% sure.
Maybe not in video, but I worked at an image processing place where we deliberately created a file called "bastard.tif". The purpose of this file was to exploit every aspect of TIFF we could find, and for those familiar with the standard you'll know that's a lot. We used non-standard pixel ratios, we switched encoding mechanisms multiple times through the file...we did everything we could to make a standards-valid TIFF that would crash everything.
Wasn't malicious, we were a commercial data processing shop and image creation/conversion was our thing. We could crash Photoshop (non-square pixels - this is early-to-mid-nineties, no idea if it still crashes it), we could bring down things like Kofax Libraries which at the time were fairly advanced pro image coding libraries. We could crash most Unix utilities for working with images...you get the idea. We definitely were thinking about it, and we were actually doing it. The idea was to know what we could and couldn't do whilst coding our image processing software - we didn't want to create a final image that, whilst technically valid, couldn't actually be used anywhere.
You, Sir, were having too much fun.
Apparently you think the only two smart phones in existence are the iPhone and the Galaxy Note 7. Boy are you in for a surprise if you ever crawl out of your basement and actually visit a store that sells cell phones.
I had an original 8GB iPhone in 2008 and it would crash, not often, but in a way where the touch wouldn't work. Everything else worked, the display, the buttons, but it didn't react to touch. Couldn't hard reset without sliding that icon on screen, unless there was some other way to do it which didn't involve going home and doing a factory reset through iTunes. Apple didn't seem to anticipate the touchscreen being unresponsive in a crash.
Why doesn't this affect all types of computers? Why doesn't it affect Android, Mac OS, Windows, and Linux? Why *just* IOS? That doesn't make sense, there must be something unique about IOS where it doesn't handle video as well as other OS's....
If telephones are outlawed, then only outlaws will have telephones.
Press and hold the upper right button and the home button simultaneously for a few seconds.
Apple didn't seem to anticipate the touchscreen being unresponsive in a crash
Yes they did.
The hard reset is holding down power and home (or volume down in the case of the iPhone 7) for a few seconds. No touch screen interaction is required.. the phone just reboots.
Personally I don't think that less than 5 seconds from holding down the two buttons to the phone starting its shutdown sequence is quite a long time.
Also.. if you can't go 5 seconds without someone bumping you so hard that you can't keep your fingers on two buttons then I shudder to think what's going to happen to the cover and battery when you are bumped.
Personally I don't think that less than 5 seconds from holding down the two buttons to the phone starting its shutdown sequence is quite a long time.
I wouldn't either, but then my phone doesn't do anything if you hold down a few buttons for 5 seconds.
I don't follow. on any iPhone if you hold the sleep/power button along with the home (or volume down for iPhone 7).. your phone will shut down -- no matter what it's doing or if it's crashed.
No need to do anything fancy or open anything up and hope that someone doesn't knock the battery out of your hand.
I didn't realise we were limiting the discussion to just iPhones. Yeah on the iPhone's 5 second hard reset still applies. That said I have seen a device before where its hard reset routines did nothing and a battery pullout was the only option. An LG device from a few years back. I hope Apple get it right when they remove their last physical button.
Lost in a genetic algorithm complexity explosion handling algorithm called: let the user base test it and we will run after afterwards. New ideas, new concepts, eh? I only wish MS understand I could do more in a week in Win 3.1 than in years in moving target Win7-8-10.
It's not really a thing, but in many devices taking the battery out is much faster than holding down a set combination of buttons for quite a long time and hoping no one bumps you along the way.
If "taking the battery out is much faster than holding down a set combination of buttons for 'quite a long time' " (for values of `quite long`of a few seconds), then accidentally removing your battery is an actual possibility.
Of course news about a fake are Fake News.
Apparently you think the only two smart phones in existence are the iPhone and the Galaxy Note 7. Boy are you in for a surprise if you ever crawl out of your basement and actually visit a store that sells cell phones.
To freeze or to still be vulnerable after more than a year?
Of course news about a fake are Fake News.
Errr no. One has nothing to do with the other. I can remove a GoPro from it's underwater case in under half a second despite a wonderful dual latching system that makes inadvertent opening almost impossible.
Likewise I can get my phone's battery out in about 2-3 seconds and yet it has never fallen out on its own accord, even the several times it's been dropped and shot across the room (no idea how my screen hasn't cracked yet).