News for hackers. Stuff that matters.

A comment on A brief history of APFS (Apple File System) in honour of its fifth birthday. Parent comment

Re:A brief history of APFS (Apple File System) in honour of ... by howinteresting on Tuesday March 28, 2023 @02:51AM (#35336867)
Well, the ideal solution is for everyone to use NFC all the time. But failing that, having both versions is preferable to what Apple does.

What is the threat model that makes having both versions exploitable? Historically, many vulnerabilities (e.g. several git vulns) have come from filesystems doing normalization rather than the lack of it.

[ Parent | on HN ]
Re:A brief history of APFS (Apple File System) in honour of ... by wkat4242 on Tuesday March 28, 2023 @02:58AM (#35336896)
The possible exploit is that you could have two versions of a file, one that the user sees and one that is executed.

Buy generally anything that leads to unexpected behaviour can be exploited in some way, if not technical then to mislead the user.

The question is, why is 'failing that' happening here? And if there's 2 files encoded differently with the same name, how would the user differentiate them?

[ Parent | on HN ]