Email or username:

Password:

Forgot your password?
evacide's posts Post Back to profile
Top-level
Rich Felker

@evacide FFS maybe Apple could start not accepting or at least not auto loading embedded media from senders you don't know??? šŸ¤¦

7 Sep 2023 at 21:35 | Wall-to-wall | Open on hachyderm.io
9 comments
Rich Felker

@evacide Platforms where folks you don't know can cold call you (email, SMS, iMessage) should ideally never support anything but pure text. If that ship has already sailed, loading non pure text content should be only on request.

7 Sep 2023 at 21:39 | Open on hachyderm.io
Rich Felker

@evacide Aside from avoiding 0day vulns and phishing, it'd avoid having to see the faces of spamming political candidates.

7 Sep 2023 at 21:42 | Open on hachyderm.io
ljĀ·rk

@dalias @evacide While it's not the default, I encourage everyone to turn on lockdown mode on iOS.

7 Sep 2023 at 21:45 | Open on todon.eu
Rich Felker

@ljrk @evacide Does lockdown mode do this? That sounds good. Sadly though a lot of things are coupled under one switch, so unless you can accept all the individual inconveniences it entails, you can't get any of the benefits, so there's strong incentive to leave it off.

7 Sep 2023 at 21:48 | Open on hachyderm.io
evacide

@dalias @ljrk The CL blog post has just added a note saying that they believe High Security mode is safe against this exploit.

7 Sep 2023 at 21:57 | Open on hachyderm.io
ljĀ·rk

@evacide @dalias I'm *pretty* sure I read in their docs that it disables parsing of untrusted message media content, but of course also restricts Js in the browser etc.

We're daily-driving an iPad in Lockdown Mode but didn't face any issues tbfh, the restrictions aren't noticeable to us. We mainly use it for browsing and media streaming.

7 Sep 2023 at 22:37 | Open on todon.eu
Serlwch āœØ
J$

@dalias @evacide ā€œlockdown modeā€. Nuff sed.

8 Sep 2023 at 17:35 | Open on mastodon.nl
Go Up