• Brewchin@lemmy.worldEnglish
    12 days

    This was an interesting series of shorts. The bouncing screen edge overlay and the use of PDF made me chuckle. Very nostalgic.

    Thirty-odd years after it was first ejaculated into the world, PDF still remains the demon threat vector for payloads that just won’t die.

  • kingofras@lemmy.worldEnglish
    12 days

    Week old substack with “details to follow soon”. This is getting tiring.

    • Carl@anarchist.nexusEnglish
      12 days

      I mean, following proper disclosure procedure requires giving the manufacturer adequate time to patch the vulnerabilities before they are released. Would you prefer they just publish the full how-to right up front, and create a zero-day for anyone (from script kiddies to state-sponsored hackers) to use as they see fit?

        • Carl@anarchist.nexusEnglish
          12 days

          Do you think “anarchy” means you actively try to give zero-day methods to state-sponsored hackers?

          • FauxLiving@lemmy.worldEnglish
            12 days

            And, importantly, it’s not a decision that’s compelled by some sort of hierarchical power structure. Responsible disclosure rules exist to protect everyone who uses the software. Like FOSS it’s a system that benefits everyone which makes it worth participating in voluntarily.

            Capitalism sometimes gives a cash prize as well, because of course they do.

  • Forsho@sh.itjust.worksEnglish
    12 days

    fucking embedded pdfs. Is there any tool that can detect this shit in advance, idk like Kaspersky but for iphones.

    • KairuByte@lemmy.dbzer0.comEnglish
      12 days

      Please don’t use Kaspersky.

      Also, no app would be able to do something like this unless it comes from Apple. Apps are sandboxed, they can’t peer into a different app, or the system itself.

      • WhyJiffie@sh.itjust.worksEnglish
        11 days

        Doesn’t the PDF contain a sandbox escape capable software? if so, any apps could do it.

        • KairuByte@lemmy.dbzer0.comEnglish
          11 days

          If that is in fact how this works (I haven’t dug in too far) then technically yes. The problem is, these are one off zero days. You can’t exactly test that this problem exists unless you know it exists, and if you know it exists then Apple knows it exists (in the case of a mainstream antivirus app at least) so there’s no point in actually attempting to exploit it, just throw in a check for vulnerable versions.

          There’s no one size fits all “all pdf exploits that ever will exist” solution because there are exploits that will likely not exist for a time.

  • Cherry@piefed.socialEnglish
    12 days

    What are the benefits of jailbreaking, would I be able to run an alternative OS?

    I’m so keen to get away from Apple.

    • kingofras@lemmy.worldEnglish
      12 days

      How is this new? This has been possible on jailbroken phones for years.

      • A_norny_mousse@piefed.socialEnglish
        12 days

        I know next to nothing about iPhones but I assume they’ve been notoriously hard to jailbreak?

  • muusemuuse@sh.itjust.worksEnglish
    11 days

    That kind of foreground painting outside the app shouldn’t be possible on iOS. This is quite impressive.