Get the latest tech news
How a single line of code could brick your iPhone
Gui Rambo writes about his coding and reverse engineering adventures.
Considering these properties, I began to wonder if there were places on iOS using Darwin notifications for powerful operations that could potentially be exploited as a denial-of-service attack from within a sandboxed app. With that widget extension in place, as soon as I installed the VeryEvilNotify app on my security research device, the “Restore in Progress” UI was shown, then failed with a prompt to restart the system. The first adopters were backupd, BackupAgent2, and UserEventAgent, all gaining entitlements related to notifying the system about device restores, mitigating the most egregious exploit presented in my proof of concept.
Or read this on Hacker News
