3 ms·
Well, someone or a group of people at Apple decided to give untrusted input to NSKeyedUnArchiver(a known exploitable API) in an OS-level service and it seems li
by meibo 3y ago
Well, someone or a group of people at Apple decided to give untrusted input to NSKeyedUnArchiver(a known exploitable API) in an OS-level service and it seems like no one stopped them or was there to review that code. That seems like a systemic failure to me.
I'm not saying that it's impossible to check in buggy code, but it's possible to have processes to prevent this type of bug nowadays and Apple should have had these 10 years ago.