News for hackers. Stuff that matters.

A comment on Stealing your SMS messages with iOS 0day. Parent comment

Re:Stealing your SMS messages with iOS 0day by mike_d on Tuesday May 05, 2020 @12:40AM (#23076564)
Apple knows how entitlements work and scan every release you try to upload for distribution. The app bundle is signed with an Apple signing key when it goes live, so you can't just randomly change the file once it is on the device.
[ Parent | on HN ]
Re:Stealing your SMS messages with iOS 0day by saagarjha on Tuesday May 05, 2020 @01:52AM (#23076925)
Evidently Apple does not know how they work, as their multiple parsers can’t get them right ;)
[ Parent | on HN ]
Re:Stealing your SMS messages with iOS 0day by nwsm on Tuesday May 05, 2020 @11:37AM (#23081176)
If their scan included an XML parser with the same flaw as CFPropertyListCreateWithData, then yes you could get it published without them noticing.
[ Parent | on HN ]