News for hackers. Stuff that matters.
Re:Disclosure of three 0-day iOS vulnerabilities by codetrotter on Friday September 24, 2021 @09:57AM (#28642401)
But Apple has the luxury of controlling both the server and the client. Why isn’t it just a matter of using HTTP range requests?

https://developer.mozilla.org/en-US/docs/Web/HTTP/Range_requ...

And if they need to get more clever than that, why not have a BitTorrent-like map of chunk hashes. So you download the update, check the hash of the whole thing and if it fails the hash check, download the chunk hashes which will be say a 256 bit hash for every individual 32 MB chunk of the file. And for any chunk that fails the hash check, use a HTTP range request to download it again.

Re:Disclosure of three 0-day iOS vulnerabilities by guntars on Friday September 24, 2021 @02:06PM (#28645843)
We can only speculate, but my guess is some combination of “didn’t feel the need to” and “the code responsible for this is nested 6 layers deep between 3 different frameworks”.