News for hackers. Stuff that matters.

A comment on Journalist’s phone hacked: all he had to do was visit any website. Parent comment

Re:Journalist’s phone hacked: all he had to do was visit any... by ec109685 on Wednesday June 24, 2020 @12:02AM (#23623953)
Not to a non-https website if the user is visiting a secure site.

Apple should disable javascript for non https sites.

[ Parent | on HN ]
Re:Journalist’s phone hacked: all he had to do was visit any... by aeternum on Wednesday June 24, 2020 @12:51AM (#23624233)
Ability to disable javascript for non-https would be a great security setting. Aligns well with Apple's goal for privacy and security as many wireless hotspots and even ISPs abuse HTTP javascript injection.
[ Parent | on HN ]
Re:Journalist’s phone hacked: all he had to do was visit any... by tjoff on Wednesday June 24, 2020 @01:43AM (#23624488)
Ironically, in response when people realize how good the non-javascript web is they will demand all sites be http.
[ Parent | on HN ]
Re:Journalist’s phone hacked: all he had to do was visit any... by yonixw on Wednesday June 24, 2020 @04:52AM (#23625707)
Location header still can redirect you to well-crafted HTTPs site, so it won't really help
[ Parent | on HN ]
Re:Journalist’s phone hacked: all he had to do was visit any... by ec109685 on Sunday June 28, 2020 @05:35AM (#23667678)
Good point.
[ Parent | on HN ]