5 ms·
How long until the articles telling users to disable iMessage?
by DanAtC 5y ago
How long until the articles telling users to disable iMessage?
- timmytokyo 5y agoI would hope Apple could do something quick and easy in response to this. From the original thread: BlastDoor is a great step, to be sure, but it's pretty lame to just slap sandboxing on iMessage and hope for the best. How about: "don't automatically run extremely complex and buggy parsing on data that strangers push to your phone?!"
- techrat 5y agoReally goes to show Apple's approach to security, "feebly containerize something after it's already been severely exploited."
- fmajid 5y agoImageIO is a fairly widely framework, so the number of vectors is very wide.
- deregulateMed 5y agoRun commercials that end with a black background with a single word Security.
- saagarjha 5y agoIt doesn't actually show a whole lot, because that's not really a very good characterization of how BlastDoor works.
- brigade 5y agoThat would mean, at the very least, that every image and video sent via SMS would require user interaction to even see a preview. Including active conversations with your contacts, given that SMS spoofing is a thing.
- Wowfunhappy 5y agoAnd even then, it would all be for naught as soon as the user opens a message, which is a pretty normal thing to do. (I do think they should be more cautious though. For example, under no circumstances should Apple Mail ever auto-extract an attached zip file from a stranger.)
- timmytokyo 5y agoWe're talking iMessage here, so Apple has more reliable evidence of identity than what's provided by easily spoofed SMS.
- deleted 5y ago[deleted]