7 ms·

The tweet announcing it: https://twitter.com/pwnsdx/status/1040944750973595649 https://twitter.com/pwnsdx/status/1040944750973595649 The code that causes the c

The tweet announcing it: https://twitter.com/pwnsdx/status/1040944750973595649 https://twitter.com/pwnsdx/status/1040944750973595649 The code that causes the crash (safe to open): https://gist.github.com/pwnsdx/ce64de2760996a6c432f06d612e33aea https://gist.github.com/pwnsdx/ce64de2760996a6c432f06d612e33... The demo itself (causes crash): https://cdn.rawgit.com/pwnsdx/ce64de2760996a6c432f06d612e33aea/raw/23f2faa0aadb4babbfd228c8bb32a26a8c51c741/safari-ripper.html https://cdn.rawgit.com/pwnsdx/ce64de2760996a6c432f06d612e33a...

avip 8y ago
It works!
- matthberg 8y ago
  More details from the Twitter thread: it's iOS 7 and up, and it also works on watchOS 5. In some apps like chrome or opera it isn't a full crash, just a "springboard crash".
  - wruza 8y ago
    I always said iOS 7 was a disaster. iOS 6- opened 8 tabs at most (deleting old tabs) and no one complained. These new youngster oses can not even manage memory in a right way — now with all these GCs no one knows how to do it.
- joering2 8y ago
  DO NOT CLICK THE LINK! Hour later I am still unable to restart my phone. It hangs on logo!! This may be a permanent fuck ;( unsure exact version but I have iOS 7 that hasnt been updated in about six months.
  - josefresco 8y ago
    DO NOT CLICK THE LINK! Never imagined I'd read those words at HN. How times have changed. Be sensible people.
  - zuppy 8y ago
    try a force restart (home + power button for about 10 seconds)
    - megablast 8y ago
      What is home?
      - PatientJ 8y ago
        I think he meant hold down volume down + power button for 10 seconds.
        jedmeyers 8y ago
        Older iPhones with physical home button use that for restart.
        JustSomeNobody 8y ago
        Last year’s model.
        jedmeyers 8y ago
        Last year’s iPhones 8 use volume down + power for restart because home is not a button, but a sensor and it has to be powered to work.
        zuppy 8y ago
        there's no iOS 7 device without home button :)
      - tbassetto 8y ago
        It's the name of the round button at the bottom of the iPhones without Face ID.
  - tannhaeuser 8y ago
    Seems like on restart Safari wants to revisit previously opened pages and crashes again ad infinitum. Isn't there a way to cold-restart iOS devices or some such (like the magic "Zap NVRAM and repair permissions" procedure back in PowerMac times)?
    - Crontab 8y ago
      "Seems like on restart Safari wants to revisit previously opened pages" I've always found that behavior annoying. If I want to revisit the last page, I can find it in history.
      - deleted 8y ago
        [deleted]
      - matkins 8y ago
        I'm sure you're in the absolute minority. Most people want all apps, including the browser, to stay the way they were when they closed them, even after a reboot
        stestagg 8y ago
        Do you have data for this? I'm also in the absolute minority
        ams6110 8y ago
        Me too. I want a blank page when I open my browser. If I reboot a device, I want nothing but base system running when it restarts.
        sethammons 8y ago
        I sure as heck want my tabs back. But I'd settle for "restore tabs" as I have to do that a lot in chrome on my MacBook Pro. On my Android, the tabs are just there and I really appreciate it. I have over a dozen tabs open on my phone and two dozen on my laptop.
        8y ago
  - Karupan 8y ago
    Able to reboot fine on iOS 12 after the crash. Safari didn’t try to reopen closed windows as well.
  - travbrack 8y ago
    No hang on 11.4.1. It came back fine.
  - andrethegiant 8y ago
    If you use iCloud for Safari, you can close another device's Safari tab from your Mac. click the iCloud tabs icon on desktop Safari, then click the circle-x to close the offending tab.
    - givinguflac 8y ago
      This is a great suggestion for those stuck on this crash
- zuppy 8y ago
  works on iOS 12 GM also
  - aaaaaaaaaab 8y ago
    I wonder if they are trying to fix it before tomorrow’s release.
    - spockz 8y ago
      It is more likely that they would fix this in a 12.0.1 that will be available shortly than to change the 12 release as all new iPhones come preloaded with 12.
- harianus 8y ago
  For me it just closes the Hacker News app. No reboot.
  - foobarbecue 8y ago
    The Hacker News app??
    - 9wzYQbTYsAIc 8y ago
      I think he means the web browser app. Probably only used for Hacker News. Like a boss.
    - notadog 8y ago
      I assume that he means one of the many Hacker News clients available for iOS such as MiniHack [1] or Simple Reader for Hacker News [2]. [1] https://itunes.apple.com/it/app/minihack-hacker-news-client/id631108846?l=en&mt=8 https://itunes.apple.com/it/app/minihack-hacker-news-client/... [2] https://itunes.apple.com/us/app/simple-reader-for-hacker-news/id1000995253?mt=8 https://itunes.apple.com/us/app/simple-reader-for-hacker-new...
- buboard 8y ago
  Survivorship bias
- runeks 8y ago
  I clicked the third link thinking it was a link to a demo video. I can confirm that 1) it’s not a link to a demo video 2) it rebooted my iPad.
rixrax 8y ago
Haha! Looks like another modern version of zip-bomb[0] or should I say - div-bomb:) [0] https://en.wikipedia.org/wiki/Zip_bomb https://en.wikipedia.org/wiki/Zip_bomb
- jhabdas 8y ago
  xD
amself 8y ago
Worked on iOS 11.4 iPhone 8
squaredpants 8y ago
Works on iPhone SE w/ iOS 12 latest public beta.
Reedx 8y ago
Interesting, it's simply a few thousand nested divs with a huge blur on them. Is it something specific about blur? Or could you do the same thing with box-shadows, etc, if there are enough of them?
- pcwalton 8y ago
  -webkit-backdrop-filter forces layerization (i.e. it promotes whatever box it's in to a Core Animation layer), while box shadows don't. This resource exhaustion bug is specific to CA layers, so you wouldn't see this with box shadows.

avip 8y ago

It works!

matthberg 8y ago
More details from the Twitter thread: it's iOS 7 and up, and it also works on watchOS 5. In some apps like chrome or opera it isn't a full crash, just a "springboard crash".
- wruza 8y ago
  I always said iOS 7 was a disaster. iOS 6- opened 8 tabs at most (deleting old tabs) and no one complained. These new youngster oses can not even manage memory in a right way — now with all these GCs no one knows how to do it.
joering2 8y ago
DO NOT CLICK THE LINK! Hour later I am still unable to restart my phone. It hangs on logo!! This may be a permanent fuck ;( unsure exact version but I have iOS 7 that hasnt been updated in about six months.
- josefresco 8y ago
  DO NOT CLICK THE LINK! Never imagined I'd read those words at HN. How times have changed. Be sensible people.
- zuppy 8y ago
  try a force restart (home + power button for about 10 seconds)
  - megablast 8y ago
    What is home?
    - PatientJ 8y ago
      I think he meant hold down volume down + power button for 10 seconds.
      - jedmeyers 8y ago
        Older iPhones with physical home button use that for restart.
        JustSomeNobody 8y ago
        Last year’s model.
        jedmeyers 8y ago
        Last year’s iPhones 8 use volume down + power for restart because home is not a button, but a sensor and it has to be powered to work.
      - zuppy 8y ago
        there's no iOS 7 device without home button :)
    - tbassetto 8y ago
      It's the name of the round button at the bottom of the iPhones without Face ID.
- tannhaeuser 8y ago
  Seems like on restart Safari wants to revisit previously opened pages and crashes again ad infinitum. Isn't there a way to cold-restart iOS devices or some such (like the magic "Zap NVRAM and repair permissions" procedure back in PowerMac times)?
  - Crontab 8y ago
    "Seems like on restart Safari wants to revisit previously opened pages" I've always found that behavior annoying. If I want to revisit the last page, I can find it in history.
    - deleted 8y ago
      [deleted]
    - matkins 8y ago
      I'm sure you're in the absolute minority. Most people want all apps, including the browser, to stay the way they were when they closed them, even after a reboot
      - stestagg 8y ago
        Do you have data for this? I'm also in the absolute minority
      - ams6110 8y ago
        Me too. I want a blank page when I open my browser. If I reboot a device, I want nothing but base system running when it restarts.
      - sethammons 8y ago
        I sure as heck want my tabs back. But I'd settle for "restore tabs" as I have to do that a lot in chrome on my MacBook Pro. On my Android, the tabs are just there and I really appreciate it. I have over a dozen tabs open on my phone and two dozen on my laptop.
        8y ago
- Karupan 8y ago
  Able to reboot fine on iOS 12 after the crash. Safari didn’t try to reopen closed windows as well.
- travbrack 8y ago
  No hang on 11.4.1. It came back fine.
- andrethegiant 8y ago
  If you use iCloud for Safari, you can close another device's Safari tab from your Mac. click the iCloud tabs icon on desktop Safari, then click the circle-x to close the offending tab.
  - givinguflac 8y ago
    This is a great suggestion for those stuck on this crash
zuppy 8y ago
works on iOS 12 GM also
- aaaaaaaaaab 8y ago
  I wonder if they are trying to fix it before tomorrow’s release.
  - spockz 8y ago
    It is more likely that they would fix this in a 12.0.1 that will be available shortly than to change the 12 release as all new iPhones come preloaded with 12.
harianus 8y ago
For me it just closes the Hacker News app. No reboot.
- foobarbecue 8y ago
  The Hacker News app??
  - 9wzYQbTYsAIc 8y ago
    I think he means the web browser app. Probably only used for Hacker News. Like a boss.
  - notadog 8y ago
    I assume that he means one of the many Hacker News clients available for iOS such as MiniHack [1] or Simple Reader for Hacker News [2]. [1] https://itunes.apple.com/it/app/minihack-hacker-news-client/id631108846?l=en&mt=8 https://itunes.apple.com/it/app/minihack-hacker-news-client/... [2] https://itunes.apple.com/us/app/simple-reader-for-hacker-news/id1000995253?mt=8 https://itunes.apple.com/us/app/simple-reader-for-hacker-new...
buboard 8y ago
Survivorship bias
runeks 8y ago
I clicked the third link thinking it was a link to a demo video. I can confirm that 1) it’s not a link to a demo video 2) it rebooted my iPad.

rixrax 8y ago

Haha! Looks like another modern version of zip-bomb[0] or should I say - div-bomb:) [0] https://en.wikipedia.org/wiki/Zip_bomb https://en.wikipedia.org/wiki/Zip_bomb

jhabdas 8y ago
xD

amself 8y ago

Worked on iOS 11.4 iPhone 8

squaredpants 8y ago

Works on iPhone SE w/ iOS 12 latest public beta.

Reedx 8y ago

Interesting, it's simply a few thousand nested divs with a huge blur on them. Is it something specific about blur? Or could you do the same thing with box-shadows, etc, if there are enough of them?

pcwalton 8y ago
-webkit-backdrop-filter forces layerization (i.e. it promotes whatever box it's in to a Core Animation layer), while box shadows don't. This resource exhaustion bug is specific to CA layers, so you wouldn't see this with box shadows.