News for hackers. Stuff that matters.

A comment on 'Karma': A hack used by the UAE to break into iPhones of foes. Parent comment

Re:'Karma': A hack used by the UAE to break into iPhones of ... by alasdair_ on Wednesday January 30, 2019 @02:36PM (#19038505)
>Especially if they claim a vulnerability that's exploitable by only sending a text.

For some time, it was possible to crash some iPhones by texting them a Taiwanese flag emoji (which was censored by mainland China). https://www.cultofmac.com/561635/apples-taiwanese-flag-ban-l...

I don't know offhand if this was a buffer overflow or something else, but if you can crash the OS with a text, you . could likely exploit it instead.

[ Parent | on HN ]
Re:'Karma': A hack used by the UAE to break into iPhones of ... by saagarjha on Wednesday January 30, 2019 @04:12PM (#19039548)
> I don't know offhand if this was a buffer overflow or something else

It was an issue when the device's local was set incorrectly and would return NULL, leading to a crash in CFStringCompare.

[ Parent | on HN ]
Re:'Karma': A hack used by the UAE to break into iPhones of ... by alasdair_ on Thursday January 31, 2019 @12:52AM (#19042700)
Many thanks!
[ Parent | on HN ]