6 ms·

Can this be avoided by disabling iMessage notifications? > The calling method then calls -[IMBalloonPluginDataSource _replaceHandleWithContactNameInString:] wh

Can this be avoided by disabling iMessage notifications? > The calling method then calls -[IMBalloonPluginDataSource _replaceHandleWithContactNameInString:] which calls im_handleIdentifiers on the 'NSString' which is really an NSNumber, which throws an exception as the selector does not exist in that class. Looks like they need to move more of their stuff to Swift to reduce snarfles like this. Stories like these (this isn't the first time that iOS/macOS could be crashed by chat messages), and the empty root password debacle, or all the GateKeeper bypasses, make me wonder if their engineers take their own WWDC security-related talks seriously. Still, it's not so bad as the Windows XP-7 epoch, when eldritch nightmares walked the land.

saagarjha 7y ago
> Can this be avoided by disabling iMessage notifications? Why do you think so?
- saurik 7y ago
  From the code right after that quote, I would be confused if a the view fronting that IMBalloonPluginDataSource was rendered in SpringBoard if you had turned off notifications.
- Razengan 7y ago
  I'm assuming it crashes when it first tries to display a preview for the message? Or does it happen even if you never use iMessage and have its notifications disabled?
drieddust 7y ago
> Still, it's not so bad as the Windows XP-7 epoch, when eldritch nightmares walked the land. You are speaking like an Apple fanboy. Days of XP are in the past and even Windows 7/Windows 2008 fairs better than Apple OSX and iOS. This is especially bad as apple sells a false sense of security when they fail to build even the basics correctly. Their walled garden is paved with expensive ibricks. Edit: Those who think I am speaking rubbish can refer this link. https://www.cvedetails.com/top-50-products.php https://www.cvedetails.com/top-50-products.php
- kalleboo 7y ago
  > Edit: Those who think I am speaking rubbish can refer this link. https://www.cvedetails.com/top-50-products.php https://www.cvedetails.com/top-50-products.php That listing groups together all OS X bugs back to 2002 under one heading, but splits up each Windows version into its own entity. So the numbers aren't really comparable.
  - bildung 7y ago
    But the bottom of that page has a cumulative count by vendor which shows Apple having the second most security issues, only topped by Microsoft. Considering the fact that Microsoft has much bigger market share and therefore security research attention, that's quite an achievement.
    - ricardobeat 7y ago
      You mean MS historically has 100% more security issues. Also IE alone competes with entire OSes in that top 10. That proves the other comment right, but surely you can spin it other ways. Anyone who has switched from old windows to Mac doesn’t need numbers to tell how wild it was.
      - bildung 7y ago
        > You mean MS historically has 100% more security issues. For an OS used 1000% as often[0], yes. I have no skin in this game, BTW, as I use neither. But given the number of security issues Apple has, I really bothers me that they still sell those products as somehow more secure. [0] = https://en.wikipedia.org/wiki/Usage_share_of_operating_systems#Desktop_and_laptop_computers https://en.wikipedia.org/wiki/Usage_share_of_operating_syste...
    - kalleboo 7y ago
      I'm not going to comment on Apple's software security standards (and Microsoft deserves more kudos for their focus on security after the bad old days of XP), I'm just pointing out that summing up CVEs is not a valid way to compare. > Considering the fact that Microsoft has much bigger market share and therefore security research attention The OS X bug numbers also include a bunch of bugs for open source projects that are bundled with OS X (Perl, Ruby, Python, SQLite, PHP etc) which increases the security research attention.

saagarjha 7y ago

> Can this be avoided by disabling iMessage notifications? Why do you think so?

saurik 7y ago
From the code right after that quote, I would be confused if a the view fronting that IMBalloonPluginDataSource was rendered in SpringBoard if you had turned off notifications.
Razengan 7y ago
I'm assuming it crashes when it first tries to display a preview for the message? Or does it happen even if you never use iMessage and have its notifications disabled?

drieddust 7y ago

> Still, it's not so bad as the Windows XP-7 epoch, when eldritch nightmares walked the land. You are speaking like an Apple fanboy. Days of XP are in the past and even Windows 7/Windows 2008 fairs better than Apple OSX and iOS. This is especially bad as apple sells a false sense of security when they fail to build even the basics correctly. Their walled garden is paved with expensive ibricks. Edit: Those who think I am speaking rubbish can refer this link. https://www.cvedetails.com/top-50-products.php https://www.cvedetails.com/top-50-products.php

kalleboo 7y ago
> Edit: Those who think I am speaking rubbish can refer this link. https://www.cvedetails.com/top-50-products.php https://www.cvedetails.com/top-50-products.php That listing groups together all OS X bugs back to 2002 under one heading, but splits up each Windows version into its own entity. So the numbers aren't really comparable.
- bildung 7y ago
  But the bottom of that page has a cumulative count by vendor which shows Apple having the second most security issues, only topped by Microsoft. Considering the fact that Microsoft has much bigger market share and therefore security research attention, that's quite an achievement.
  - ricardobeat 7y ago
    You mean MS historically has 100% more security issues. Also IE alone competes with entire OSes in that top 10. That proves the other comment right, but surely you can spin it other ways. Anyone who has switched from old windows to Mac doesn’t need numbers to tell how wild it was.
    - bildung 7y ago
      > You mean MS historically has 100% more security issues. For an OS used 1000% as often[0], yes. I have no skin in this game, BTW, as I use neither. But given the number of security issues Apple has, I really bothers me that they still sell those products as somehow more secure. [0] = https://en.wikipedia.org/wiki/Usage_share_of_operating_systems#Desktop_and_laptop_computers https://en.wikipedia.org/wiki/Usage_share_of_operating_syste...
  - kalleboo 7y ago
    I'm not going to comment on Apple's software security standards (and Microsoft deserves more kudos for their focus on security after the bad old days of XP), I'm just pointing out that summing up CVEs is not a valid way to compare. > Considering the fact that Microsoft has much bigger market share and therefore security research attention The OS X bug numbers also include a bunch of bugs for open source projects that are bundled with OS X (Perl, Ruby, Python, SQLite, PHP etc) which increases the security research attention.