Re:A persistent denial of service vulnerability affecting iOS
by viktorcode on Sunday January 02, 2022 @03:12AM
(#29766828)
Don't know, but in general arbitrarily set limits are bad. Note, the bug is not in the long name. The bug is in the inability of system services to handle a long device name. That I imagine is hard to fix, but this is exactly what needs fixing. Limiting the name length is akin to band aid.
[ Parent
| on HN ]
Re:A persistent denial of service vulnerability affecting iOS
by userbinator on Sunday January 02, 2022 @04:52AM
(#29767322)
In theory I would agree, but in practice (which is different from theory, as the classic saying goes), I disagree; I have another comment here about the perils of debating limits, but I don't think designing the system to handle 500,000-character names would be a good thing either, because we know from experience that if something can be abused, it will. Needlessly making something "limitless" is an invitation to test that --- and in the real world, we know that there definitely are limits even if they are as volatile as "available memory"; and doing something like that is not good for reliability.