4 ms·
We knew 30 years ago that message attachments (mostly email at that time) were a huge security problem. All those binary file types to parse... what could go wr
by seethishat 7mo ago
We knew 30 years ago that message attachments (mostly email at that time) were a huge security problem. All those binary file types to parse... what could go wrong ;)
It's good to see Apple's Lockdown mode having such success by simply disabling message attachments.
- CharlesW 7mo agoI know you're not being serious, but for anyone who may not realize that, it does more than disabling attachments. Lockdown Mode's "optional, extreme" protection substantially changes the experience of using your device. https://support.apple.com/en-us/105120 https://support.apple.com/en-us/105120
- et-al 7mo agoOne would hope there would be some sanitization of attachments to prevent this. I also wish there was a regular option in iOS Messages to disable link previews.
- halJordan 7mo agoApple (and Google fwiw) do in fact have impressive hardening around their parsers.
- kenferry 6mo agoThere's a ton of sanitization of attachments. It just isn't foolproof. On iOS messages attachments are decoded in a separate, heavily restricted and sandboxed process, and the decoded sanitized results are sent back to the UI process. It just isn't perfect.