3 ms·
Well, the ideal solution is for everyone to use NFC all the time. But failing that, having both versions is preferable to what Apple does. What is the threat m
by howinteresting 4y ago
Well, the ideal solution is for everyone to use NFC all the time. But failing that, having both versions is preferable to what Apple does.
What is the threat model that makes having both versions exploitable? Historically, many vulnerabilities (e.g. several git vulns) have come from filesystems doing normalization rather than the lack of it.
- wkat4242 4y agoThe possible exploit is that you could have two versions of a file, one that the user sees and one that is executed. Buy generally anything that leads to unexpected behaviour can be exploited in some way, if not technical then to mislead the user. The question is, why is 'failing that' happening here? And if there's 2 files encoded differently with the same name, how would the user differentiate them?
- deleted 4y ago[deleted]