Re:Stealing your SMS messages with iOS 0day
by jackjeff on Tuesday May 05, 2020 @10:24AM
(#23080312)
Indeed. I was wrong to assume Apple would not have yet another XML Parser somewhere else :)
In that case it would only work with side loaded Apps signed with enterprise and developer certificates.
I stand corrected.
That being said I wonder... since we have two parsers on the device and one in submission process, if a more clever variant of this bug would have worked... I guess we will never know. For sure that parser is rock solid now.
Re:Stealing your SMS messages with iOS 0day
by saagarjha on Tuesday May 05, 2020 @11:43AM
(#23081251)
> For sure that parser is rock solid now.
I wouldn’t be too sure.
Re:Stealing your SMS messages with iOS 0day
by jiveturkey on Tuesday May 05, 2020 @12:15PM
(#23081645)
thatsthejoke.jpg
Do you know if TestFlight uses the same entitlements parsing logic? It may have been possible to exploit users' devices through beta versions.
That's not accurate, the entitlements parsing logic on the App Store submission system has always caught this, it's the client side parsing that doesn't.
You can't submit an app to the store that uses this exploit, because the store will reject it as having invalid entitlements.