this post was submitted on 07 Sep 2023
159 points (100.0% liked)

Technology

59472 readers
3380 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago
MODERATORS
L3s@lemmy.world
L3s@fry.gs
L4s@fry.gs
L4s@lemmy.world
enu@lemmy.world
159
Apple patches “clickless” 0-day image processing vulnerability in iOS, macOS (arstechnica.com)
submitted 1 year ago by stopthatgirl7@kbin.social to c/technology@lemmy.world
9 comments fedilink hide all child comments
 

"BLASTPASS" bug can install malware without user interaction.

you are viewing a single comment's thread
view the rest of the comments
[–] cheese_greater@lemmy.world 0 points 1 year ago (3 children)

Daily reminder to use Lockdown Mode, folks. Nothing of value is lost in activating and using it.

[–] ultratiem@lemmy.ca 8 points 1 year ago* (last edited 1 year ago) (1 children)

Edit: turns out the flaw is exploited by way of an attachment that LM stops from loading. So in this case, LM would save you.

[–] Kerfuffle@sh.itjust.works 5 points 1 year ago (1 children)

Doesn't the article contradict what you just said?

"We believe, and Apple’s Security Engineering and Architecture team has confirmed to us, that Lockdown Mode blocks this particular attack," Citizen Lab said.

[–] ultratiem@lemmy.ca 5 points 1 year ago

Edited. Still a sledgehammer approach imo.

[–] gorysubparbagel@lemmy.world 2 points 1 year ago

The most likely issue you'll encounter is that it blocks almost all message attachment types, so if someone texts you an image, PDF, contact card, etc, it will completely block the attachment.