A new CSS-based web attack will crash and restart your iPhone

Re:A new CSS-based web attack will crash and restart your iP... by rixrax on Sunday September 16, 2018 @05:54AM (#17998144)

Haha! Looks like another modern version of zip-bomb[0] or should I say - div-bomb:)

[0] https://en.wikipedia.org/wiki/Zip_bomb

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by Reedx on Sunday September 16, 2018 @01:19PM (#17999937)

Interesting, it's simply a few thousand nested divs with a huge blur on them. Is it something specific about blur? Or could you do the same thing with box-shadows, etc, if there are enough of them?

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by pcwalton on Sunday September 16, 2018 @01:23PM (#17999956)

-webkit-backdrop-filter forces layerization (i.e. it promotes whatever box it's in to a Core Animation layer), while box shadows don't. This resource exhaustion bug is specific to CA layers, so you wouldn't see this with box shadows.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by squaredpants on Sunday September 16, 2018 @12:11PM (#17999611)

Works on iPhone SE w/ iOS 12 latest public beta.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by amself on Sunday September 16, 2018 @06:42AM (#17998282)

Worked on iOS 11.4 iPhone 8

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by avip on Sunday September 16, 2018 @04:14AM (#17997891)

It works!

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by runeks on Sunday September 16, 2018 @08:35AM (#17998625)

I clicked the third link thinking it was a link to a demo video. I can confirm that 1) it’s not a link to a demo video 2) it rebooted my iPad.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by joering2 on Sunday September 16, 2018 @04:44AM (#17997958)

DO NOT CLICK THE LINK! Hour later I am still unable to restart my phone. It hangs on logo!! This may be a permanent fuck ;( unsure exact version but I have iOS 7 that hasnt been updated in about six months.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by andrethegiant on Sunday September 16, 2018 @03:26PM (#18000596)

If you use iCloud for Safari, you can close another device's Safari tab from your Mac. click the iCloud tabs icon on desktop Safari, then click the circle-x to close the offending tab.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by givinguflac on Sunday September 16, 2018 @06:42PM (#18001666)

This is a great suggestion for those stuck on this crash

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by tannhaeuser on Sunday September 16, 2018 @04:49AM (#17997978)

Seems like on restart Safari wants to revisit previously opened pages and crashes again ad infinitum. Isn't there a way to cold-restart iOS devices or some such (like the magic "Zap NVRAM and repair permissions" procedure back in PowerMac times)?

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by Crontab on Sunday September 16, 2018 @08:14AM (#17998545)

"Seems like on restart Safari wants to revisit previously opened pages"

I've always found that behavior annoying. If I want to revisit the last page, I can find it in history.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by matkins on Sunday September 16, 2018 @08:35AM (#17998628)

I'm sure you're in the absolute minority. Most people want all apps, including the browser, to stay the way they were when they closed them, even after a reboot

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by sethammons on Sunday September 16, 2018 @09:24AM (#17998792)

I sure as heck want my tabs back. But I'd settle for "restore tabs" as I have to do that a lot in chrome on my MacBook Pro. On my Android, the tabs are just there and I really appreciate it. I have over a dozen tabs open on my phone and two dozen on my laptop.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by LoSboccacc on Sunday September 16, 2018 @09:45AM (#17998898)

It’s very convenient, but isn’t that scenario better covered by hibernating the os? That covers all app and doesn’t require any app to have special behaviour coded in

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by sethammons on Sunday September 16, 2018 @10:37AM (#17999140)

If I never had to restart, sure. I have to restart my laptop weekly at least. Heck, it locked up twice last week opening Diablo 3 forcing a hard power cycle. My phone gets restarted less often but still gets into odd states where a reboot is needed.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by LoSboccacc on Sunday September 16, 2018 @03:08PM (#18000481)

tangential, but check out that your power supply is ok, that's the second most common source of random lockups during load (I assume drivers are up to date, that'd be the first)

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by ams6110 on Sunday September 16, 2018 @09:24AM (#17998791)

Me too. I want a blank page when I open my browser. If I reboot a device, I want nothing but base system running when it restarts.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by signal11 on Sunday September 16, 2018 @10:06AM (#17998993)

But that’s why you need a “safe start mode” where you can start the app with a clean slate. Several Microsoft Office apps do this now. Given iOS’s repeated “crash loop” issues you’d think they’d have learnt by now.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by 13of40 on Sunday September 16, 2018 @11:04AM (#17999265)

I'm in that minority too, I guess. There's nothing more grating than to explicitly close all tabs, only to be asked whether you want to open them again. For me, tabs are like this useless plaque that slowly accumulates and needs to be blown away every two or three days.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by reaperducer on Sunday September 16, 2018 @05:55PM (#18001381)

Yep. I know someone who keeps dozens and dozens of tabs open on an iPhone. It's kind of like a bookmark library.

I explained that there is a bookmark feature just for this sort of thing, but when you're used to doing something one way, change can be slow.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by bdcravens on Sunday September 16, 2018 @10:20AM (#17999055)

That always bothers me. What if a page was (dumbly) in a state that makes a change I don't want?

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by stestagg on Sunday September 16, 2018 @09:10AM (#17998747)

Do you have data for this? I'm also in the absolute minority

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by zuppy on Sunday September 16, 2018 @04:47AM (#17997970)

try a force restart (home + power button for about 10 seconds)

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by megablast on Sunday September 16, 2018 @07:32AM (#17998416)

What is home?

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by tbassetto on Sunday September 16, 2018 @07:46AM (#17998454)

It's the name of the round button at the bottom of the iPhones without Face ID.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by PatientJ on Sunday September 16, 2018 @07:45AM (#17998451)

I think he meant hold down volume down + power button for 10 seconds.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by jedmeyers on Sunday September 16, 2018 @09:53AM (#17998935)

Older iPhones with physical home button use that for restart.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by JustSomeNobody on Sunday September 16, 2018 @12:03PM (#17999560)

Last year’s model.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by jedmeyers on Sunday September 16, 2018 @03:34PM (#18000645)

Last year’s iPhones 8 use volume down + power for restart because home is not a button, but a sensor and it has to be powered to work.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by zuppy on Friday September 21, 2018 @02:27AM (#18037565)

there's no iOS 7 device without home button :)

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by travbrack on Sunday September 16, 2018 @05:39AM (#17998112)

No hang on 11.4.1. It came back fine.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by Karupan on Sunday September 16, 2018 @05:15AM (#17998053)

Able to reboot fine on iOS 12 after the crash. Safari didn’t try to reopen closed windows as well.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by josefresco on Sunday September 16, 2018 @07:30AM (#17998411)

DO NOT CLICK THE LINK!

Never imagined I'd read those words at HN. How times have changed. Be sensible people.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by matthberg on Sunday September 16, 2018 @04:25AM (#17997916)

More details from the Twitter thread: it's iOS 7 and up, and it also works on watchOS 5. In some apps like chrome or opera it isn't a full crash, just a "springboard crash".

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by wruza on Sunday September 16, 2018 @10:42AM (#17999167)

I always said iOS 7 was a disaster. iOS 6- opened 8 tabs at most (deleting old tabs) and no one complained. These new youngster oses can not even manage memory in a right way — now with all these GCs no one knows how to do it.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by harianus on Sunday September 16, 2018 @05:15AM (#17998051)

For me it just closes the Hacker News app. No reboot.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by foobarbecue on Sunday September 16, 2018 @08:19AM (#17998560)

The Hacker News app??

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by notadog on Sunday September 16, 2018 @10:48AM (#17999191)

I assume that he means one of the many Hacker News clients available for iOS such as MiniHack [1] or Simple Reader for Hacker News [2].

[1] https://itunes.apple.com/it/app/minihack-hacker-news-client/...

[2] https://itunes.apple.com/us/app/simple-reader-for-hacker-new...

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by 9wzYQbTYsAIc on Sunday September 16, 2018 @09:39AM (#17998862)

I think he means the web browser app. Probably only used for Hacker News. Like a boss.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by zuppy on Sunday September 16, 2018 @04:48AM (#17997975)

works on iOS 12 GM also

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by aaaaaaaaaab on Sunday September 16, 2018 @05:22AM (#17998063)

I wonder if they are trying to fix it before tomorrow’s release.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by spockz on Sunday September 16, 2018 @07:12AM (#17998367)

It is more likely that they would fix this in a 12.0.1 that will be available shortly than to change the 12 release as all new iPhones come preloaded with 12.

[ Parent | on HN ]

Re:A new CSS-based web attack will crash and restart your iP... by buboard on Sunday September 16, 2018 @07:59AM (#17998492)

Survivorship bias

[ Parent | on HN ]