3 ms·
> Apple’s Lost Mode doesn’t currently stop users from injecting arbitrary computer code into its phone number field Can we be precise when writing about securi
by lol768 5y ago
> Apple’s Lost Mode doesn’t currently stop users from injecting arbitrary computer code into its phone number field
Can we be precise when writing about security vulnerabilities? It's a stored XSS in the phone number field.
You can include precise technical details whilst still writing an article suitable for a broad audience.
- gowld 5y agoXSS isn't in the phone field. S is in the phonr field. XS is in how Apple delivers the phone field value.