Slashdot Mirror
'Text Bomb' Is Latest Apple Bug (bbc.com)
An anonymous reader quotes a report from the BBC: A new "text bomb" affecting Apple's iPhone and Mac computers has been discovered. Abraham Masri, a software developer, tweeted about the flaw which typically causes an iPhone to crash and in some cases restart. Simply sending a message containing a link which pointed to Mr Masri's code on programming site GitHub would be enough to activate the bug -- even if the recipient did not click the link itself. Mr Masri said he "always reports bugs" before releasing them. Apple has not yet commented on the issue. On a Mac, the bug reportedly makes the Safari browser crash, and causes other slowdowns. Security expert Graham Cluley wrote on his blog that the bug does not present anything to be particularly worried about -- it's merely very annoying. After the link did the rounds on social media, Mr Masri removed the code from GitHub, therefore disabling the "attack" unless someone was to replicate the code elsewhere.
causes an iPhone to crash and in some cases restart. Simply sending a message containing a link which pointed to Mr Masri's code on programming site GitHub would be enough to activate the bug -- even if the recipient did not click the link itself. Mr Masri said he "always reports bugs" before releasing them.
I usually love seeing such bugs in action. Anyone can point us to the video?
Apple's got a real general malaise problem, lately. The fix is likely to replace the CEO and possibly other high-up executives because they've focused too much on other crap, and not on the core-business. If Tim Cook, (for example,) wants to be the CEO of a watch company, or a headphone company, let him go do that.
Apple is a computer company, even if they removed the word "computer" from their name. Of course this is merely my opinion, but I'll tell you this for sure: unless and until Apple shapes up its act, I am not buying any more Apple products, or products that only work with Apple products. If it comes to pass that I need a new computer and/or cellphone before Apple pulls its corporate head out of its corporate ass, I will switch to something else. (Case in point, I recently obtained an old MacBook that Apple has decided is obsolete, and put GNU/Linux on it, in preparation for doing the same with my iMac, which once I don't need it for my iPhone anymore, that will be it, and I will unApplify my life. I'll probably get a dumb-phone, and go back to the days when I navigated for myself, etc., and not rely on the increasingly unreliable kludgey crap coming from Apple nowadays.
"Mr Masri removed the code from GitHub, therefore disabling the "attack" unless someone was to replicate the code elsewhere."
Oh wait. This is /. Walled garden, Android is better, etc etc.
Link?
I don't know about all of you, but I'm getting really excited just waiting to see how SuperKendall will enlighten us all as to how this is a feature that benefits each and every disciple of the Apple world. This is gonna be good.
+1 troll
As part of that crash and other slowdowns result is the user's password getting revealed in plain text again?
Domestic spying is now "Benign Information Gathering"
The Messages app's default behavior has it load a preview of the linked-to content, hence why the linked-to content can—and in this case did—cause problems.
Anyway, previews can be toggled on or off in settings, it's possible to delete the offending messages via settings if Messages becomes inaccessible, and messages from unknown senders are by default shunted into a separate section in Messages from those sent by contacts, so the issue was always going to be minimal in scope and impact. Even so, it's nice to see that they were able to accomplish some initial mitigation prior to the full fix coming next week.
If it can't be expressed in ASCII, it's not worth writing.
Fuck with those apple sheeples
https://web.archive.org/web/20180117063656/iabem97.github.io/chaiOS
You are so new here it hurts.
Go back to whatever shitsite you came from...probably 4chan.
Re "the content of the link itself, not the linked-to content." .
Its all part of building on search features https://www.wired.com/2014/10/... (10.20.14)
Domestic spying is now "Benign Information Gathering"
Some text messages would reliably cause the phone to reboot on delivery of the message.
This would cause an almost endless reboot cycle, until the server gave up attempting to deliver the text message (around 10-20 reboots).
The real "Libtards" are the Libertarians!
Bump it up to coffee stirrer the next time your post this.
This is exactly why Unicode support is unsafe and dangerous! Thankfully Slashdot will always be a safe haven from such shenanigans.
"What do you despise? By this are you truly known." --Princess Irulan, Manual of Muad'Dib
/)
HAIL ZALGO
Even so, it's nice to see that they were able to accomplish some initial mitigation prior to the full fix coming next week.
It's not "nice", it's a bare minimum.
lucm, indeed.
There's nothing wrong with being new and nothing wrong with bitching about old news. There is however something wrong with telling people to go away.
Also 4chan is not a "shitsite". The internet is a beautiful mosaic and 4chan is a colorful part of it.
lucm, indeed.
another apple bug, what a cesspool of code ios must be.
Try the Wayback machine. I found it pretty easily. Really interesting trick. He made a simple HTML file with a link in it, and the HREF of that link has all kinds of crazy garbage in it (unicode characters) which cause the webkit engine to spaz out. Even copying the source out of chrome and pasting into Notepad++ made the text editor freak out a little bit.
The bug itself is understandable -- the space of all possible Unicode text strings is infinite, and the behavior of a universal text renderer is more subtle than most programmers would imagine. I think most programmers would be susceptible to not handling every use case in every language correctly.
What's disconcerting is that the fault appears to crash the entire OS, not just the one buggy application. Shouldn't memory protection and process segmentation prevent that?
I don't care if it's 90,000 hectares. That lake was not my doing.
No, the Apple's software will access the link anyway. Perhaps the bug is even in the Apple's spyware, which harvests data from their product's phones.
4chan is the information superhighway equivalent of a lumpy biohazard bag lying next to an off-ramp in Detroit.
It's probably baked into something like the iPhone X Server equivalent, causing the system-wide crash we see here.
It's still not helping much.
Oh you said kick...