A developer and security researcher named Sabri Haddouche has discovered 15 lines of code that will crash and reboot any Apple iPhone or Apple iPad. The code takes advantage of a flaw in WebKit, which is the browser engine used by Safari. Haddouche says that a large number of elements are repeated inside the backdrop filter causing all of the phone's resources to be used. This in turn causes a kernel panic, which forces the OS to shut down or face permanent damage and data loss. "Anything that renders HTML on iOS is affected," the security researcher says.
According to other security firms, the code was able to freeze iPhone units running the last iOS 12 beta. Tomorrow, beginning at 10am PDT/1pm EDT, Apple will start pushing out iOS 12 in the U.S. This means that the company will have to disseminate an update in the near future to fix this exploit. Luckily for iOS users, the code cannot be used to run malicious apps or steal personal data. But there is no denying that this is a pain in the ass if you are feuding with someone who sends you a link to the code, or is sending it to you via an HTML email.
At this point, the only thing you can do is look carefully at who is sending you email, and ignore links unless you 100% know where it is taking your browser to. Haddouche informed Apple about this WebKit flaw on Friday, so hopefully the company has already started work on fixing it. If you want to see what the 15 lines of code look like without it bringing down your iOS powered device, click on this link.
In my opinion - iOS is very uniform and cleaned up. It is easy to find items that are in clean room. Android is so all over the place and different versions of it - you can have a device that has extremely dangerous exploits that are being utilized - but because there are so many different versions and nothing is latest update - no one gonna report that.
There are nearly daily articles that show exploits on android.
This glitch is a. Serious one if it can render loss of data, but reboot is exactly how the is should handle this. I had to force close my Samsung’s quite often enough due to irresponsible apps and at one point factory reset. Don’t fool yourself - Apple users are nealrly all on same version - so it’s easy to find this - android - were you just depend on luck.
At least I know when this is known it’ll be less then a week or two and it will be patched. If something reported on android - good luck!
This copy is for your personal, non-commercial use only. You can order presentation-ready copies for distribution to your colleagues, clients or customers at https://www.parsintl.com/phonearena or use the Reprints & Permissions tool that appears at the bottom of each web page. Visit https://www.parsintl.com/ for samples and additional information.