News for hackers. Stuff that matters.

A comment on FaceTime bug lets you hear audio of person you are calling before they pick up. Parent comment

Re:FaceTime bug lets you hear audio of person you are callin... by seanp2k2 on Monday January 28, 2019 @10:06PM (#19023382)
Let's not forget https://www.cvedetails.com/cve/CVE-2013-1050/ and https://www.cvedetails.com/cve/CVE-2015-7496/ and https://www.cvedetails.com/cve/CVE-2017-8900/ (to a lesser extent). Check out https://www.cvedetails.com/vulnerability-list.php?vendor_id=... for more fun.
[ Parent | on HN ]
Re:FaceTime bug lets you hear audio of person you are callin... by samstave on Monday January 28, 2019 @10:41PM (#19023543)
http://i.imgur.com/rG0p0b2.gif
[ Parent | on HN ]
Re:FaceTime bug lets you hear audio of person you are callin... by raverbashing on Tuesday January 29, 2019 @03:55AM (#19024838)
But the Windows 95 login was just for logging into the network, not the computer

I think that if you hit Cancel there it would work just as well. You wouldn't get it logged into the domain though

[ Parent | on HN ]
Re:FaceTime bug lets you hear audio of person you are callin... by rusk on Tuesday January 29, 2019 @07:33AM (#19025783)
Yes - from what I recall there was not even a pretense of security. Everything was just unencrypted FAT (VFAT rather than FAT32) and if you logged in as one user all other user's data was clearly visible - it was just a means to have your own user workspace and customisations applied. Windows 95 and everything up to (not including) XP was a toy OS for home users ... If you wanted "grown up" features you had to go for NT.
[ Parent | on HN ]
Re:FaceTime bug lets you hear audio of person you are callin... by stiGGG on Monday January 28, 2019 @11:04PM (#19023657)
Oh dear, I remember something similar was possible on iOS lockscreen multiple times. What version of Windows was that?
[ Parent | on HN ]
Re:FaceTime bug lets you hear audio of person you are callin... by samstave on Monday January 28, 2019 @11:09PM (#19023680)
95. 98 had an even better one... just hitting cancel on some login boxes would let you in.
[ Parent | on HN ]
Re:FaceTime bug lets you hear audio of person you are callin... by cheerlessbog on Monday January 28, 2019 @11:34PM (#19023797)
I believe that was by design: the dialog was an opportunity to authenticate with the domain. If you just wanted local access you could hit cancel. Remember Win9x was not a secure OS itself.
[ Parent | on HN ]
Re:FaceTime bug lets you hear audio of person you are callin... by eitland on Tuesday January 29, 2019 @03:16AM (#19024671)
Pretty sure I've seen a similar trick on XP or later as well. (I learned it from someone I didn't meet until long after I last saw a 95/98/2000 machine.)
[ Parent | on HN ]
Re:FaceTime bug lets you hear audio of person you are callin... by jodrellblank on Tuesday January 29, 2019 @03:28AM (#19024716)
not forgetting https://www.jwz.org/blog/2015/04/i-told-you-so-again/
[ Parent | on HN ]
Re:FaceTime bug lets you hear audio of person you are callin... by AJRF on Tuesday January 29, 2019 @06:46AM (#19025567)
!WARNING! - This now redirects to an image of a hairy testicle. I think the site owner noticed the traffic and put in a redirect.
[ Parent | on HN ]
Re:FaceTime bug lets you hear audio of person you are callin... by eMSF on Tuesday January 29, 2019 @09:09AM (#19026348)
It's been that way for years (i.e. visitors from HN get redirected).
[ Parent | on HN ]
Re:FaceTime bug lets you hear audio of person you are callin... by AJRF on Tuesday January 29, 2019 @10:06AM (#19026847)
Ah you are right, should have experimented with that.
[ Parent | on HN ]
Re:FaceTime bug lets you hear audio of person you are callin... by obituary_latte on Tuesday January 29, 2019 @06:49AM (#19025579)
Heh just saw/posted the same. I think you’re right - jwz being a little trolly.
[ Parent | on HN ]
Re:FaceTime bug lets you hear audio of person you are callin... by obituary_latte on Tuesday January 29, 2019 @06:47AM (#19025569)
wtf. Clicking your link brought me to http://i.imgur.com/rG0p0b2.gif somehow. jwz doing a referrer troll?? Anyone else see this?
[ Parent | on HN ]
Re:FaceTime bug lets you hear audio of person you are callin... by sebcat on Tuesday January 29, 2019 @08:40AM (#19026141)
Probably Referer check, copy-pasting the URL works.
[ Parent | on HN ]
Re:FaceTime bug lets you hear audio of person you are callin... by semi-extrinsic on Tuesday January 29, 2019 @01:34AM (#19024282)
This was the worst one for me:

https://www.cvedetails.com/cve/CVE-2017-12712/

[ Parent | on HN ]
Re:FaceTime bug lets you hear audio of person you are callin... by dmitriid on Tuesday January 29, 2019 @02:35AM (#19024514)
I remember an article somewhere about these kinds of bugs. A lot of medical hardware/software combos are/can be compromised. And here comes the problem: do you disclose the vulnerabilities since it means potentially killing people? How long do you wait before manufacturers acknowledge and fix the problem (and they often don't)?

So yeah, these types of vulnerabilities are very very scary.

[ Parent | on HN ]