0x0

75 ms·

811.
by 0x0 9y ago
I think they got caught red-handed with an existing pasteboard API that suddenly gained handoff powers but at the same time started showing modal system overlays UIs when accessed? At least it came off like that.
812.
by 0x0 9y ago
When handoff was first introduced, it was obvious that facebook was auto-scraping the pasteboard, because as soon as you foregrounded the facebook ios app, iOS would show a "pasting from macbook handoff..." type dialog despite no
813.
by 0x0 9y ago
A properly configured SMTP STARTTLS would not really send anything substantial in cleartext either, it would issue the STARTTLS command as the first command and the rest would be wrapped in encrypted TLS. You can think of the unencrypted ST
814.
by 0x0 9y ago
Did they re-use the codename for VLC 2.2.8? The about screen for 2.2.8 shows "Version 2.2.8 Weatherwax (Intel 64bit)"
815.
by 0x0 9y ago
The way I read this is: 1. iOS and macOS allows you to type out an SMS message on your mac, which is delivered via the same mechanisms and channels as regular iMessages to your phone, causing it to relay and send out the SMS on behalf of yo
816.
Apple IdentityServices: What if anyone can be you?(medium.com)
5 points by 0x0 9y ago|4 comments
817.
by 0x0 9y ago
This is a disaster waiting to happen. Scary.
818.
by 0x0 9y ago
If you're opening a new 2nd account, there isn't anything to "move", is there?
819.
by 0x0 9y ago
All OSes have bugs, and the XNU kernel certainly has had its share, so removing the ability to execute arbitrary code definitively makes exploitation of buffer overflows etc in 3rd party apps much harder.
820.
by 0x0 9y ago
Efficient javascript needs to be JIT'ed, but that means your app needs to be granted API access to map writeable memory as executable, which is a security risk they are not willing to grant third party developers. So a third party brow
821.
by 0x0 9y ago
Things like this can happen when corporations know more about you than you think: https://www.forbes.com/sites/kashmirhill/2012/02/16/how-targ...
822.
by 0x0 9y ago
Maybe. It's an odd phrasing. Why not just say "will not run"? How do you run 32bit apps "WITH compromise"? In a VM window?
823.
by 0x0 9y ago
There's some good info on that here: "Dissecting objc_msgSend on ARM64" https://www.mikeash.com/pyblog/friday-qa-2017-06-30-dissecti... "Let's Build objc_msgSend" https://www.mi
824.
by 0x0 9y ago
Don't forget that those 715mb you take have to be delivered by someone running those servers at the other end, multiplied by the number of devices. Don't be a vandal on the internet. Don't be the reason for why we can't
825.
by 0x0 9y ago
Reminds me about the D-Link vs phk NTP drama years ago https://slashdot.org/story/06/04/07/130209/d-link-firmware-a...
826.
by 0x0 9y ago
I got the same warning, opened Appstore.app and found a pending update for the Command Line Tools that wasn't there earlier today.
827.
by 0x0 9y ago
Certainly not much if anything at all, but it's mildly interesting to note that it identifies as 10.14 and not, say, 11.0. Anyways there is surely something strange brewing for the next macOS, as Apple has repeatedly noted that "m
828.
0day iOS HomeKit vuln allowed remote access to smart accessories including locks(9to5mac.com)
3 points by 0x0 9y ago|0 comments
829.
by 0x0 9y ago
But shouldn't Go really assume that the vDSO (or any other external function) will use at least 128 bytes of stack then? If go only reserves 104 bytes, then even without all this 4k probe business, there would be a risk that the vDSO c
830.
by 0x0 9y ago
Agreed on all those points (except - I think interrupts use the kernel stack? Otherwise triggering an interrupt would clobber the red zone, which should be preserved, since it pushes the return address and flags IIRC? So interrupts don&#x27
831.
by 0x0 9y ago
How does being an exported function change the rules, I thought the x86-64 ABI mandated an implicit safe 128 bytes below rsp at all times? Also, how can a vDSO function "allocate" stack? It would have to know about the current sta
832.
by 0x0 9y ago
Seems unlikely considering the huge amount of APIs shared between ios and macos that would make porting a working simulator a herculean task. CoreAudio, AVFoundation, Metal, Mach kernel APIs and ports, XPC, CoreGraphics, CoreAnimation, etc
833.
by 0x0 9y ago
Setting up for a 104 byte stack seems pretty crazy, wouldn't you risk overrunning the red zone even without all that stack probing? https://en.wikipedia.org/wiki/Red_zone_(computing)
834.
by 0x0 9y ago
From a quick reading of https://groups.google.com/forum/m/#!topic/nix-devel/KV9eomId... - it doesn't seem related to sandboxes or anything fancy, it seems like the kill signals go across the basic u
835.
TeamViewer switch sides bug(github.com)
3 points by 0x0 9y ago|0 comments
836.
by 0x0 9y ago
I'd say that works against the purpose of protecting customers. Every blackhat in the world had probably heard about it last night, but if Apple had announced details earlier, even without a patch, informed customers could take prevent
837.
by 0x0 9y ago
Why is all communication from Apple on this case, both yesterday and today, being channeled via screenshots of text appended to random twitter users posts or blogs? It's weird that there's no official page on apple.com for these s
838.
by 0x0 9y ago
They do this all the time with invisible updates. Click AppleMenu > About this mac > System Report, and scroll down to Software > Installations, and click on the "Install Date" column header twice to sort by install date
839.
by 0x0 9y ago
If it's so easy, why didn't they take a photo themselves? Could it be that using someone else's existing photo actually saved them time and money? If so, then it sounds like there's value in the original photo. If not, w
840.
by 0x0 9y ago
On a side-note, I was (pleasantly) surprised to recently learn that if you have macs set up with Back To My Mac, you'll get an "iCloud BTMM" IPv6 encrypted tunnel where all your devices appear via dns-sd, even across the inte

More ›