Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

Help me, I'm a prisoner in a Fortune cookie file!


computers / comp.mobile.ipad / Re: iOS 15.2.1 and iPadOS 15.2.1 released for their HomeKit!

SubjectAuthor
* iOS 15.2.1 and iPadOS 15.2.1 released for their HomeKit!Ant
`* Re: iOS 15.2.1 and iPadOS 15.2.1 released for their HomeKit!Andy Burnelli
 +* Re: iOS 15.2.1 and iPadOS 15.2.1 released for their HomeKit!Jolly Roger
 |`- Re: iOS 15.2.1 and iPadOS 15.2.1 released for their HomeKit!Andy Burnelli
 `* Re: iOS 15.2.1 and iPadOS 15.2.1 released for their HomeKit!Ant
  `- Re: iOS 15.2.1 and iPadOS 15.2.1 released for their HomeKit!Andy Burnelli

1
iOS 15.2.1 and iPadOS 15.2.1 released for their HomeKit!

<pqadncnha6fHvEL8nZ2dnUU7-fPNnZ2d@earthlink.com>

  copy mid

https://www.novabbs.com/computers/article-flat.php?id=1146&group=comp.mobile.ipad#1146

  copy link   Newsgroups: misc.phone.mobile.iphone comp.mobile.ipad
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!news.misty.com!border2.nntp.dca1.giganews.com!nntp.giganews.com!buffer2.nntp.dca1.giganews.com!buffer1.nntp.dca1.giganews.com!nntp.earthlink.com!news.earthlink.com.POSTED!not-for-mail
NNTP-Posting-Date: Wed, 12 Jan 2022 12:43:38 -0600
From: ant...@zimage.comANT (Ant)
Subject: iOS 15.2.1 and iPadOS 15.2.1 released for their HomeKit!
Newsgroups: misc.phone.mobile.iphone,comp.mobile.ipad
User-Agent: tin/2.4.5-20201224 ("Glen Albyn") (Linux/5.10.19-200.fc33.x86_64 (x86_64))
Message-ID: <pqadncnha6fHvEL8nZ2dnUU7-fPNnZ2d@earthlink.com>
Date: Wed, 12 Jan 2022 12:43:38 -0600
Lines: 9
X-Usenet-Provider: http://www.giganews.com
NNTP-Posting-Host: 47.180.143.226
X-Trace: sv3-X9822BGesBliJsQ4UUZ/KP0zXLgyZ3zVfbJBr6UnaNuBR0NpgSebFwlg1SOFikn/84t9ZiFA9U/hjY9!AJD1l/joLZmPvFpMaR/TphGh5vytB4M3nZJ11Epdqux1lcypgi5HRIaF2LJp9jzs5Unt5w/XMUzu!SGY2h5S9odcM7s9/Vppsbsy70jli0hkS
X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly
X-Postfilter: 1.3.40
X-Original-Bytes: 1384
 by: Ant - Wed, 12 Jan 2022 18:43 UTC

https://support.apple.com/en-us/HT213043
--
Slammy new week as expected. Lots of spams again! 2022 isn't any better and different so far. :(
Note: A fixed width font (Courier, Monospace, etc.) is required to see this signature correctly.
/\___/\ Ant(Dude) @ http://aqfl.net & http://antfarm.home.dhs.org.
/ /\ /\ \ Please nuke ANT if replying by e-mail.
| |o o| |
\ _ /
( )

Re: iOS 15.2.1 and iPadOS 15.2.1 released for their HomeKit!

<srnbqh$rht$1@gioia.aioe.org>

  copy mid

https://www.novabbs.com/computers/article-flat.php?id=1147&group=comp.mobile.ipad#1147

  copy link   Newsgroups: misc.phone.mobile.iphone comp.mobile.ipad
Path: i2pn2.org!i2pn.org!aioe.org!3PLzD/rb74ta/CXxNcmbeA.user.46.165.242.75.POSTED!not-for-mail
From: spa...@nospam.com (Andy Burnelli)
Newsgroups: misc.phone.mobile.iphone,comp.mobile.ipad
Subject: Re: iOS 15.2.1 and iPadOS 15.2.1 released for their HomeKit!
Date: Wed, 12 Jan 2022 19:57:06 -0000 (UTC)
Organization: Aioe.org NNTP Server
Message-ID: <srnbqh$rht$1@gioia.aioe.org>
References: <pqadncnha6fHvEL8nZ2dnUU7-fPNnZ2d@earthlink.com>
Injection-Info: gioia.aioe.org; logging-data="28221"; posting-host="3PLzD/rb74ta/CXxNcmbeA.user.gioia.aioe.org"; mail-complaints-to="abuse@aioe.org";
X-Notice: Filtered by postfilter v. 0.9.2
 by: Andy Burnelli - Wed, 12 Jan 2022 19:57 UTC

On Wed, 12 Jan 2022 12:43:38 -0600, Ant wrote:

> https://support.apple.com/en-us/HT213043

Has Apple _ever_ released a new iOS that was _not_ filled with holes?
*Apple didn't even test the _simplest_ most basic of bugs for God's sake.*

*Apple patches HomeKit denial-of-service bug with new iOS update*
<https://www.theverge.com/2022/1/12/22880493/apple-15-2-1-patch-ios-homekit-denial-of-service-vulnerability-fix>

"HomeKit devices labeled with a very long name would cause iPhones
and iPads to endlessly freeze, crash, and reboot.
Since HomeKit device names are backed up to iCloud, signing in to the
same iCloud account with a restored device would retrigger the crash"

Who wants to take bets that there are plenty more iOS holes to be fixed?
*In the entire iPhone history, Apple has _never_ sufficiently tested iOS.*

Re: iOS 15.2.1 and iPadOS 15.2.1 released for their HomeKit!

<j48qq6Fea3U1@mid.individual.net>

  copy mid

https://www.novabbs.com/computers/article-flat.php?id=1148&group=comp.mobile.ipad#1148

  copy link   Newsgroups: misc.phone.mobile.iphone comp.mobile.ipad
Path: i2pn2.org!i2pn.org!aioe.org!news.uzoreto.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: jollyro...@pobox.com (Jolly Roger)
Newsgroups: misc.phone.mobile.iphone,comp.mobile.ipad
Subject: Re: iOS 15.2.1 and iPadOS 15.2.1 released for their HomeKit!
Date: 12 Jan 2022 20:08:39 GMT
Organization: People for the Ethical Treatment of Pirates
Lines: 38
Message-ID: <j48qq6Fea3U1@mid.individual.net>
References: <pqadncnha6fHvEL8nZ2dnUU7-fPNnZ2d@earthlink.com>
<srnbqh$rht$1@gioia.aioe.org>
X-Trace: individual.net NL+R1hzZa49puWGtbQvk8gw7SZUQNTuK5qCTbI0FBc3ENBXEZk
Cancel-Lock: sha1:ILYpDHCqVF0PgUn586nB/Xo1KYc=
Mail-Copies-To: nobody
X-Face: _.g>n!a$f3/H3jA]>9pN55*5<`}Tud57>1<n@LQ!aZ7vLO_nWbK~@T'XIS0,oAJcU.qLM
dk/j8Udo?O"o9B9Jyx+ez2:B<nx(k3EdHnTvB]'eoVaR495,Rv~/vPa[e^JI+^h5Zk*i`Q;ezqDW<
ZFs6kmAJWZjOH\8[$$7jm,Ogw3C_%QM'|H6nygNGhhl+@}n30Nz(^vWo@h>Y%b|b-Y~()~\t,LZ3e
up1/bO{=-)
User-Agent: slrn/1.0.3 (Darwin)
 by: Jolly Roger - Wed, 12 Jan 2022 20:08 UTC

On 2022-01-12, Andy Burnelli <spam@nospam.com> wrote:
> On Wed, 12 Jan 2022 12:43:38 -0600, Ant wrote:
>
>> https://support.apple.com/en-us/HT213043
>
> Has Apple _ever_ released a new iOS that was _not_ filled with holes?

*YAWN*
There's no such thing as bug-free software, dip shit troll. It is a FACT
that all major operating systems have bugs and security vulnerabilities.
And lame trolls like you HATE factual discussions.

> *Apple didn't even test the _simplest_ most basic of bugs for God's sake.*

Bullshit. By that measure, no operating system vendors test, since all
of them have bugs and security vulnerabilities. You're an idiot troll.

> *Apple patches HomeKit denial-of-service bug with new iOS update*

*Google fixes nightmare Android bug that stopped user from calling 911*

<https://arstechnica.com/gadgets/2022/01/google-fixes-nightmare-android-bug-that-stopped-user-from-calling-911/>

"Android's January security patch is out, and it's addressing one of the
nastiest Android bugs to come up in some time: certain apps can stop you
from contacting 911 or other worldwide emergency services numbers."

Who wants to take bets that there are plenty more Android holes to be
fixed?
* In the entire Android history, Google has _never_ sufficiently tested Android*

We can play this idiotic game all day, stupid troll.

--
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

Re: iOS 15.2.1 and iPadOS 15.2.1 released for their HomeKit!

<srnq77$q17$1@gioia.aioe.org>

  copy mid

https://www.novabbs.com/computers/article-flat.php?id=1150&group=comp.mobile.ipad#1150

  copy link   Newsgroups: misc.phone.mobile.iphone comp.mobile.ipad
Path: i2pn2.org!i2pn.org!aioe.org!cxiGXEJ9Uq0p1kmZmzFBKA.user.46.165.242.75.POSTED!not-for-mail
From: spa...@nospam.com (Andy Burnelli)
Newsgroups: misc.phone.mobile.iphone,comp.mobile.ipad
Subject: Re: iOS 15.2.1 and iPadOS 15.2.1 released for their HomeKit!
Date: Thu, 13 Jan 2022 00:02:48 -0000 (UTC)
Organization: Aioe.org NNTP Server
Message-ID: <srnq77$q17$1@gioia.aioe.org>
References: <pqadncnha6fHvEL8nZ2dnUU7-fPNnZ2d@earthlink.com> <srnbqh$rht$1@gioia.aioe.org> <j48qq6Fea3U1@mid.individual.net>
Injection-Info: gioia.aioe.org; logging-data="26663"; posting-host="cxiGXEJ9Uq0p1kmZmzFBKA.user.gioia.aioe.org"; mail-complaints-to="abuse@aioe.org";
X-Notice: Filtered by postfilter v. 0.9.2
 by: Andy Burnelli - Thu, 13 Jan 2022 00:02 UTC

On 12 Jan 2022 20:08:39 GMT, Jolly Roger wrote:

> By that measure, no operating system vendors test

You have a short memory Jolly Roger as this was covered before.

There is no common operating system _less_ tested than is iOS, Jolly Roger.
None.

The _worst_ (by far and by all accounts) in lack of testing is iOS, JR.
Every iOS release has something like 25% of the code that is _never_ tested.

Even Craig Federighi said in an internal memo Apple's entire QA process was
atrocious. So did high level Apple engineers. So did the entire industry.

We've covered this many times Jolly Roger; you don't even read the cites.

Google proved Apple couldn't possibly _ever_ have tested iOS Jolly Roger.
*Huge swaths of iOS code were untested for _years_ Jolly Roger.*

Why do you think they found so many bugs in Facetime, when the shit hit the
fan after all? Apple had _never_ tested Facetime for _years_ until a mere
kid proved that to be the case.

Only 10% of Facetime had been tested by the time that kid found those bugs.
The fact is Apple merely _advertises_ that they test the iOS code.

It's easier to advertise that it's tested than to actually test it.
Want cites?

Re: iOS 15.2.1 and iPadOS 15.2.1 released for their HomeKit!

<UvudneOPS--3AUL8nZ2dnUU7-IWdnZ2d@earthlink.com>

  copy mid

https://www.novabbs.com/computers/article-flat.php?id=1157&group=comp.mobile.ipad#1157

  copy link   Newsgroups: misc.phone.mobile.iphone comp.mobile.ipad
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!news.misty.com!border2.nntp.dca1.giganews.com!nntp.giganews.com!buffer2.nntp.dca1.giganews.com!buffer1.nntp.dca1.giganews.com!nntp.earthlink.com!news.earthlink.com.POSTED!not-for-mail
NNTP-Posting-Date: Wed, 12 Jan 2022 21:27:38 -0600
From: ant...@zimage.comANT (Ant)
Subject: Re: iOS 15.2.1 and iPadOS 15.2.1 released for their HomeKit!
Newsgroups: misc.phone.mobile.iphone,comp.mobile.ipad
References: <pqadncnha6fHvEL8nZ2dnUU7-fPNnZ2d@earthlink.com> <srnbqh$rht$1@gioia.aioe.org>
User-Agent: tin/2.4.5-20201224 ("Glen Albyn") (Linux/5.10.19-200.fc33.x86_64 (x86_64))
Message-ID: <UvudneOPS--3AUL8nZ2dnUU7-IWdnZ2d@earthlink.com>
Date: Wed, 12 Jan 2022 21:27:38 -0600
Lines: 28
X-Usenet-Provider: http://www.giganews.com
NNTP-Posting-Host: 47.180.143.226
X-Trace: sv3-HC8EthQfYfEemBW7bq0Z8aLL23FrAWVLJWfC0gdJ8zIvbG4nDEe24aAsDh8ejGHV6egzjO3ZXnbYiDG!S5KPODPvzuqgdWK5YTZMV6GQDbeJUnq91Gr2qQW5iTXhwom2BHSwQPIoGgU/t+GtfmimkkEVe19Q!gWwEOr1cdNJAGIaODWgBfROhuPuFT4Pt
X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly
X-Postfilter: 1.3.40
X-Original-Bytes: 2435
 by: Ant - Thu, 13 Jan 2022 03:27 UTC

In misc.phone.mobile.iphone Andy Burnelli <spam@nospam.com> wrote:
> On Wed, 12 Jan 2022 12:43:38 -0600, Ant wrote:

> > https://support.apple.com/en-us/HT213043

> Has Apple _ever_ released a new iOS that was _not_ filled with holes?
> *Apple didn't even test the _simplest_ most basic of bugs for God's sake.*

> *Apple patches HomeKit denial-of-service bug with new iOS update*
> <https://www.theverge.com/2022/1/12/22880493/apple-15-2-1-patch-ios-homekit-denial-of-service-vulnerability-fix>

> "HomeKit devices labeled with a very long name would cause iPhones
> and iPads to endlessly freeze, crash, and reboot.
> Since HomeKit device names are backed up to iCloud, signing in to the
> same iCloud account with a restored device would retrigger the crash"

> Who wants to take bets that there are plenty more iOS holes to be fixed?
> *In the entire iPhone history, Apple has _never_ sufficiently tested iOS.*

Has ANYONE release any new OS without holes? ;P
--
Slammy new week as expected. Lots of spams again! 2022 isn't any better and different so far. :(
Note: A fixed width font (Courier, Monospace, etc.) is required to see this signature correctly.
/\___/\ Ant(Dude) @ http://aqfl.net & http://antfarm.home.dhs.org.
/ /\ /\ \ Please nuke ANT if replying by e-mail.
| |o o| |
\ _ /
( )

Re: iOS 15.2.1 and iPadOS 15.2.1 released for their HomeKit!

<sro7fa$1109$1@gioia.aioe.org>

  copy mid

https://www.novabbs.com/computers/article-flat.php?id=1158&group=comp.mobile.ipad#1158

  copy link   Newsgroups: misc.phone.mobile.iphone comp.mobile.ipad comp.sys.mac.system
Path: i2pn2.org!i2pn.org!aioe.org!3PLzD/rb74ta/CXxNcmbeA.user.46.165.242.75.POSTED!not-for-mail
From: spa...@nospam.com (Andy Burnelli)
Newsgroups: misc.phone.mobile.iphone,comp.mobile.ipad,comp.sys.mac.system
Subject: Re: iOS 15.2.1 and iPadOS 15.2.1 released for their HomeKit!
Date: Thu, 13 Jan 2022 03:48:59 -0000 (UTC)
Organization: Aioe.org NNTP Server
Message-ID: <sro7fa$1109$1@gioia.aioe.org>
References: <pqadncnha6fHvEL8nZ2dnUU7-fPNnZ2d@earthlink.com> <srnbqh$rht$1@gioia.aioe.org> <UvudneOPS--3AUL8nZ2dnUU7-IWdnZ2d@earthlink.com>
Injection-Info: gioia.aioe.org; logging-data="33801"; posting-host="3PLzD/rb74ta/CXxNcmbeA.user.gioia.aioe.org"; mail-complaints-to="abuse@aioe.org";
X-Notice: Filtered by postfilter v. 0.9.2
 by: Andy Burnelli - Thu, 13 Jan 2022 03:48 UTC

On Wed, 12 Jan 2022 21:27:38 -0600, Ant wrote:

> Has ANYONE release any new OS without holes?

Hi Ant,

You're not an apologist but your flippant remarks shows you're unaware of
the facts where even the head of engineering said Apple QA was atrocious.

I'm going to be blunt with you - so I hope you own the intelligence to
comprehend the simple words I'm going to use below to explain it to you.

You know I don't make this stuff up, so you have to understand that iOS is
literally untested code (which Google Project Zero proved beyond doubt).

So please don't be so flippant about how atrocious the iOS QA really is.
You _know_ I have cites for what I say as we've covered this before.

Huge portions of iOS code are _completely_ untested, but let's just look at
the latest bug that this thread is referencing.

Do you know what it is?
I do.

It's one of the most obvious and most sophomoric vulnerabilities around.
Apple _forgot_ to test long label names.

Do you realize how _simple_ it is to test for such an obvious overflow?
You probably don't, Ant.

But if you don't realize how bad iOS testing is that they can't even test
for long label names, then please don't be so idiotically flippant about how
bad iOS testing truly is - at it's so bad as to be nearly criminal.

Apple gets away with atrocious QA because their advertising is so good.
But that's only because people like you don't understand these bugs.

In your next post, I want you to show at least a bare minimum
kindergarten-level _comprehension_ of what this bug truly was, Ant - and how
Apple could and should have caught it themselves - but didn't.

Without that comprehension, you're just as ignorant as Jolly Roger is.

1
server_pubkey.txt

rocksolid light 0.9.8
clearnet tor