3 ms·
doorLock: HomeKit DoS/semi-bricking Vulnerability (Via Home Invitation)
- jbverschoor 5y agoSee https://trevorspiniolas.com/doorlock/doorlock.html https://trevorspiniolas.com/doorlock/doorlock.html Cause: > When the name of a HomeKit device is changed to a large string (500,000 characters in testing), any device with an affected iOS version installed that loads the string will be disrupted, even after rebooting. Restoring a device and signing back into the iCloud account linked to the HomeKit device will again trigger the bug. There are two main scenarios that may occur afterwards, as outlined in the "Effects" section of this document. Effect: > iOS will become unresponsive. All input to the device is ignored or significantly delayed, and it will be unable to meaningfully communicate over USB. After around a minute, backboardd will be terminated by watchdog and reload, but the device will remain unresponsive. This cycle will repeat indefinitely with an occasional reboot. Rebooting, though, does not resolve the issue, nor does updating the device