mas.to is one of the many independent Mastodon servers you can use to participate in the fediverse.
Hello! mas.to is a fast, up-to-date and fun Mastodon server.

Administered by:

Server stats:

12K
active users

Tony Arcieri 🌹🦀

Welp, time to update all of your iDevices again...

Seems there's a WebKit RCE, local privilege escalation, and signature bypass attack, all of which are being actively exploited and seem like they can probably be chained together into at least a remote root exploit.

support.apple.com/en-us/HT2139

Apple SupportAbout the security content of iOS 17.0.1 and iPadOS 17.0.1This document describes the security content of iOS 17.0.1 and iPadOS 17.0.1.

@bascule
These updates seem to be more frequent now.

Is the software getting worse or is the bug finding and patching getting better?

@railmeat they've added all sorts of memory protections and mitigations including hardware stack protection and yet the remote root RCEs keep coming.

I think if anything it's a testament to how software written in memory unsafe languages will always be ridden with vulnerabilities, no matter how many mitigations you throw at it.