5 ms·
Speaking as an ex-Apple employee, I'll just point out that a really malicious actor could have used this to harm some significant percentage of the installed iO
by romaaeterna 7y ago
Speaking as an ex-Apple employee, I'll just point out that a really malicious actor could have used this to harm some significant percentage of the installed iOS infrastructure, and done critical damage to Apple as a company with it. In fact, I don't know the percentage of users still on <12.3, but maybe they still could. A band-aid fix for this one bug should not be where they stop here.
- EADGBE 7y agoThey're (Apple) rather lucky that their user base vehemently upgrades whenever possible.
- snaveed 7y agoI've iPhone user I've ever met outside tech circles avoids installing OS updates. They end up updating soon anyway for a variety of reasons (some updated apps stop working, update occurs "on its own" overnight, to get rid of of the notification icon, and so on).
- machinecoffee 7y agoIt does help that the process is pretty painless. And at least for me, a good excuse to do a reboot - which I really do as seldom as possible on my laptop and iphone.
- applecrazy 7y agoWhat they should also do is block the malformed message from being sent too. Not sure how to do that, since iMessages are encrypted in transit, but I'm sure there's some way.
- arwineap 7y agoApple controls the CA; it's pretty straight forward for them to check contents. iMessage really could have been something great (despite apple controlling CA) if they had just opened it up for more devices. Instead WhatsApp wiped the floor with them.
- gruez 7y ago>Apple controls the CA; it's pretty straight forward for them to check contents. and in the process eavesdrop on everybody's messages? no thanks.
- olliej 7y agoWhat? No Apple cannot decrypt messages so cannot check the content. Messages are not encrypted to Apples keys they’re only encrypted to recipient device keys - there is no way for Apple to filter any content without removing the end to end encryption of iMessage, which Apple does not want to do - every bit of user content that Apple can decrypt increases the value in compromising Apple’s service infrastructure.
- saagarjha 7y ago> A band-aid fix for this one bug should not be where they stop here. What do you suggest they do?
- mzkply 7y agothey can force-push emergency fixes
- saagarjha 7y agoThis isn't easy on iOS, and that doesn't sound like a particularly good idea anyways.
- swalsh 7y agoWould it not be possible to detect malformed messages, and prevent them from being sent to a phone in the first place?
- saagarjha 7y agoNo idea; it might be that Apple can't detect these because they're encrypted.
- applecrazy 7y agoYes, they're encrypted in transit.
- romaaeterna 7y agoThe easiest thing that occurs to me would be a on-phone "message virus scanner" that self-updates and checks incoming messages against a threat database after decryption, but before passing them to the rest of the system. Architecture-wise some thought should be given to keeping iOS from being DoS'd by the crash/respawn of any service. Also, looking at the "assuming it's a string" line from the problem description, Apple needs to make an investment look through the codebase for this same error in other guises. That's what occurs to me off the top of my head anyway.
- m463 7y agoThat sounds like code for "Apple can push an update without user consent" or... "Apple can turn off imessage to users with OS < 12.3 until users update"