FaceTime bug lets you hear audio of person you are calling before they pick up

Re:FaceTime bug lets you hear audio of person you are callin... by nurettin on Tuesday January 29, 2019 @02:16AM (#19024438)

This is a very naive estimation of what might happen when someone has access to all your running software. Since it is linux, it loads executables into memory and is able to run them even when they are deleted along with runtime dependencies.

Anything that caches anything to anywhere other than disk will be accessible. Your memcache, your redis, some databases, keychains, your non-userdata browser sessions.

[ Parent | on HN ]

Re:FaceTime bug lets you hear audio of person you are callin... by laumars on Tuesday January 29, 2019 @05:53AM (#19025359)

I'm aware of that but it's a moot point because you'd be popping the storage device back in anyway. Which is why I didn't address that in my previous comment.

In any case, half the examples you've provided there are server specific and you really shouldn't be allowing untrusted physical access to your servers (nor running Xorg to be honest).

[ Parent | on HN ]

Re:FaceTime bug lets you hear audio of person you are callin... by nurettin on Tuesday January 29, 2019 @07:26AM (#19025741)

While I do agree, a lot of ideas here are still laden with hindsight.

[ Parent | on HN ]