4 ms·
It's unclear if they even reported this issue to Apple.
by fh9302 3y ago
It's unclear if they even reported this issue to Apple.
- cedws 3y agoIt's been reported >At the time of public release, Apple has implemented a mitigation for iLeakage in Safari However the site gives no details on timelines or a report at all. (edit) They have added a "When did you notify Apple?" to the FAQ.
- HatchedLake721 3y agoInterestingly, the YouTube videos are 13 months old.
- thfuran 3y agoThat's when they reported it to apple.
- matthewdgreen 3y agoThey reported it to Apple a long time ago, over a year I think. The problem appears to be that it's very hard to mitigate. ETA: To be clear, this isn't me speculating. I spoke with one of the authors and asked this specific question. Apple hadn't shared the mitigation with them as of a few days ago.
- fh9302 3y agoThank you. Do you know if lockdown mode / disabling JIT would mitigate the issue?
- matthewdgreen 3y agoFrom what I’m told disabling JIT might do the job. With consequences to things breaking down.
- saagarjha 3y agoDisabling JIT would make it substantially harder to exploit.
- MatthiasPortzel 3y agoFrom the site (perhaps it was updated to include this?): > We disclosed our results to Apple on September 12, 2022 (408 days before public release).