• 0 Posts
  • 17 Comments
Joined 1 year ago
cake
Cake day: July 1st, 2023

help-circle











  • FYI to you or anyone who doesn’t know: If you are browsing the internet on an iOS or iPadOS device you are forced to use the Webkit rendering engine. Chrome, Safari, Brave, Firefox. All of them use Webkit to display web pages because you won’t get an app on the App store if you use anything else. The EU is forcing Apple to allow other browsing tech through the app submission process, so we will see alternatives in the future.






  • In my understanding: What happens is a Heap Buffer Overflow. The Heap is a style of memory and a Buffer is just a chunk of storage where you place something that is a work in progress. (Think a Youtube video buffering, you are waiting for more data to come down so you can play the video)

    The WebP image type has the unintended ability to write to more memory than the OS assigns it. It can ‘overflow’.

    If you craft a WebP image file just right, you can write malicious code to a location in memory that the OS may think is executable code and then run it, all without the user knowing.