Re:macOS is background scanning and following downloaded QR ...
by grooot on Wednesday October 05, 2022 @12:46PM
(#33097926)
It was before the zero day was closed.
[ Parent
| on HN ]
Re:macOS is background scanning and following downloaded QR ...
by fishywang on Wednesday October 05, 2022 @12:51PM
(#33098010)
so you are saying apple is doing something they already knew is a bad idea?
Re:macOS is background scanning and following downloaded QR ...
by grooot on Wednesday October 05, 2022 @12:52PM
(#33098022)
No. I’m saying your information is outdated and wrong.
Re:macOS is background scanning and following downloaded QR ...
by cycomanic on Wednesday October 05, 2022 @01:53PM
(#33098900)
What do you mean? The OP said that this is how Pegasus pwned (notice the past tense) the iPhone. That's correct. Moreover while Apple might have closed that specific vulnerability, would you bet your money (or even your live) on there not being other vulnerabilities in the apple indexer?
Re:macOS is background scanning and following downloaded QR ...
by fishywang on Wednesday October 05, 2022 @01:05PM
(#33098224)
how can you be so confident that it's "closed"? the last time apple announced the high protection mode for state sponsored targets in new ios (whatever it's called), they disable all auto previews in that mode. if they are as confident as you are that it's "closed" that doesn't seem necessary?
Re:macOS is background scanning and following downloaded QR ...
by lilyball on Wednesday October 05, 2022 @03:18PM
(#33100071)
Disabling link previews in high protection mode is more likely to be a combination of not issuing any network requests that could accidentally leak your IP, and being able to see the full URL so link previews can't pretend to be a different site to trick you into clicking on it.