News for hackers. Stuff that matters.

A comment on iMessage, Apple Music used by NSO Pegasus to attack journalist iPhones. Parent comment

Re:iMessage, Apple Music used by NSO Pegasus to attack journ... by Dah00n on Monday July 19, 2021 @12:38PM (#27884567)
>"BlastDoor is a great step, to be sure, but it's pretty lame to just slap sandboxing on iMessage and hope for the best. How about: "don't automatically run extremely complex and buggy parsing on data that strangers push to your phone?!"

https://twitter.com/billmarczak/status/1416801514685796352

[ Parent | on HN ]
Re:iMessage, Apple Music used by NSO Pegasus to attack journ... by gjsman-1000 on Monday July 19, 2021 @12:49PM (#27884723)
Except that almost every other secure messenger is guilty of the same thing. And they don't sandbox at all, whereas BlastDoor at least tries to.
[ Parent | on HN ]
Re:iMessage, Apple Music used by NSO Pegasus to attack journ... by Dah00n on Tuesday July 20, 2021 @06:36AM (#27892085)
Really? I have never heard of any "extremely complex and buggy parsing" done by other clients. Do you have a link to info on that?
[ Parent | on HN ]