News for hackers. Stuff that matters.

A comment on On the Timing of iOS’s SSL Vulnerability and Apple’s ‘Addition’ to NSA’s PRISM. Parent comment

Re:On the Timing of iOS’s SSL Vulnerability and Apple’s ‘Add... by cperciva on Saturday February 22, 2014 @11:43PM (#7284957)
You think this is the bug they're relying on?

Actually... yes. Memory corruption bugs are harder to exploit quietly, because if you get something wrong you'll get a crash instead of code execution. Missing certificate validation is much safer to exploit.

[ Parent | on HN ]

There are no comments on this comment yet.