top | item 28440481

(no title)

iamnotwhoiam | 4 years ago

Does this mean that iMessage evaluates messages as code for some reason? Why on earth would that be the case? It's a foundational security principle to not do that.

And even if they did then why is that so hard to fix?

discuss

order

kenferry|4 years ago

It’s more like, if you send someone a photo, iMessage will decode the photo and display it. If the imaging library has a bug a maliciously crafted image may be exploitable.

iMessage has more integrations than that too. If you send someone a URL, e.g., the recipient will see a preview of the content.

iMessage does a lot to mitigate the attack surface, but people still get through.

xvector|4 years ago

Can Apple not rewrite the parsing components in a memory-safe language?

dannyw|4 years ago

iMessage is also the only messaging app that triggers all its decode functions upon notification, because of its special privileged status.

moftz|4 years ago

I imagine that iMessage isn't executing the code but the malware is packed into some part of the metadata that some dumb library needs to parse and some sort of buffer overflow attack is accomplished. The library is probably assuming the data is safe to parse.