Journalist’s phone hacked: all he had to do was visit any website

Re:Journalist’s phone hacked: all he had to do was visit any... by c22 on Tuesday June 23, 2020 @09:21PM (#23622799)

Not to mention if DNS isn't encrypted and you control the network you can just redirect requests wherever you want.

[ Parent | on HN ]

Re:Journalist’s phone hacked: all he had to do was visit any... by ec109685 on Wednesday June 24, 2020 @12:02AM (#23623953)

Not to a non-https website if the user is visiting a secure site.

Apple should disable javascript for non https sites.

[ Parent | on HN ]

Re:Journalist’s phone hacked: all he had to do was visit any... by aeternum on Wednesday June 24, 2020 @12:51AM (#23624233)

Ability to disable javascript for non-https would be a great security setting. Aligns well with Apple's goal for privacy and security as many wireless hotspots and even ISPs abuse HTTP javascript injection.

[ Parent | on HN ]

Re:Journalist’s phone hacked: all he had to do was visit any... by tjoff on Wednesday June 24, 2020 @01:43AM (#23624488)

Ironically, in response when people realize how good the non-javascript web is they will demand all sites be http.

[ Parent | on HN ]

Re:Journalist’s phone hacked: all he had to do was visit any... by yonixw on Wednesday June 24, 2020 @04:52AM (#23625707)

Location header still can redirect you to well-crafted HTTPs site, so it won't really help

[ Parent | on HN ]

Re:Journalist’s phone hacked: all he had to do was visit any... by ec109685 on Sunday June 28, 2020 @05:35AM (#23667678)

Good point.

[ Parent | on HN ]