Advertisement
Sections
New Safari exploit lets a few lines of code crash and restart iOS devices
Web developer Sabri Haddouche explained that the Safari exploit has 15 lines and causes a Kernel panic.

After a bug involving a Telegu character started crashing iPhones around the world recently, a security researcher seems to have found a new way to crash and restart any iPhone. This one requires a few lines of code and all iPhones and iPads are vulnerable to it while Mac users will see Safari crash if the code is run.[caption id="attachment_5177021" align="alignnone" width="1280"]
Apple iPhone XS Max. Image: Apple[/caption]Web developer Sabri Haddouche explained in an interview with TechCrunch that the code has 15 lines and exploits "a weakness in iOS’ web rendering engine WebKit". Now, this WebKit is mandated by all apps and browsers used across all its products. This exploit is currently available on this GitHub page under the title 'Safari Reaper'. How appropriate.When TechCrunch, tested this code on iOS 11.4.1, the iPhone did indeed restart after freezing for some time. As per the report, iOS 12 Beta also crashed after the code was executed. Tech2 also ran the code on an iPhone SE running on iOS 11.4.1 and it crashed and restarted.Well the good thing here is that this seems to be Safari related bug only as trying to open the code in Telegram messaging app didn't do anything. There is no need to worry about data security since the code cannot be executed to malware as per the report.However, if anyone sends you this link disguised as some other URL and you click it, your iPhone will restart. An annoying bug for sure but with no major consequences. The report states that Apple is looking into fixing the bug.In other more related news, iOS 12 will be hitting devices globally today. To know more about it, click here.
Apple iPhone XS Max. Image: Apple[/caption]Web developer Sabri Haddouche explained in an interview with TechCrunch that the code has 15 lines and exploits "a weakness in iOS’ web rendering engine WebKit". Now, this WebKit is mandated by all apps and browsers used across all its products. This exploit is currently available on this GitHub page under the title 'Safari Reaper'. How appropriate.When TechCrunch, tested this code on iOS 11.4.1, the iPhone did indeed restart after freezing for some time. As per the report, iOS 12 Beta also crashed after the code was executed. Tech2 also ran the code on an iPhone SE running on iOS 11.4.1 and it crashed and restarted.Well the good thing here is that this seems to be Safari related bug only as trying to open the code in Telegram messaging app didn't do anything. There is no need to worry about data security since the code cannot be executed to malware as per the report.However, if anyone sends you this link disguised as some other URL and you click it, your iPhone will restart. An annoying bug for sure but with no major consequences. The report states that Apple is looking into fixing the bug.In other more related news, iOS 12 will be hitting devices globally today. To know more about it, click here.First Published:Sep 17, 2018, 16:10:10 IST
Advertisement
Advertisement

Why AI notetakers are raising serious privacy and security concerns
AI notetakers promise effortless meeting summaries, but experts warn they could expose confidential conversations, corporate secrets and personal voiceprints. As businesses increasingly adopt AI-powered meeting assistants, questions over data storage, privacy, consent and legal risks are becoming impossible to ignore
5 min read
China's low-cost AI models are changing the global AI race. Here's why Silicon Valley is worried
As Chinese firms continue to improve performance while keeping prices low, the AI race is no longer just about building the smartest model—it is increasingly becoming a battle over who can deliver the best value
2 min read
China's Kimi K3 challenges US AI leaders with frontier-level performance at lower cost
Chinese artificial intelligence startup Moonshot AI has unveiled its latest open-weight AI model, Kimi K3, with early results suggesting it could compete with some of the world's most advanced AI systems developed by leading US companies
2 min read
How did Instagram run ads promoting child abuse in India?
India has issued a notice to Meta after an investigation alleged that Instagram displayed paid advertisements promoting child sexual abuse material. MeitY ordered Meta to remove such Instagram ads and explain within seven days how they were approved
8 min read
Why has India halted WhatsApp’s username feature before launch?
India has halted WhatsApp’s planned username feature, citing concerns about cybercrime, impersonation, and law enforcement challenges. As Meta races to address security concerns, here’s why MeitY has paused the rollout, what the feature does, and how it could influence privacy and online safety in India
3 min read
Advertisement
Advertisement
