3 ms·
This “loophole” is prepending a url with a specific long unintuitive string, that somehow allows visiting parentally blocked urls, but is not known to have been
by skygazer 2y ago
This “loophole” is prepending a url with a specific long unintuitive string, that somehow allows visiting parentally blocked urls, but is not known to have been exploited at all, aside from the researcher that discovered it. I think the issue is that Apple didn’t fix it because it was deemed unlikely to be exploited by children unless the researcher went public. Also Apple denied it was a security issue eligible for bounty as it didn’t affect security of the device, and it wasn’t within a category of issue they presently reward.
I’m curious how it works - is it just a reverse proxy on some server that takes a url as a parameter and serves it up? Is it google translate? Is it some esoteric way to refer to the url or IP address? If it’s any of those I can definitely see it working for the enterprising kid, and also why Apple wouldn’t want to attempt a fix or think they need to.
This unusual and maybe unrealistic moral panic territory for Joanna Stern. But maybe the attempt at reputational damage will prompt a “fix.”