Reboot or Freeze Apple Products With HTML and CSS

Mon, Sep 17, 2018

There is a new attack out there that allows you to reboot iOS or freeze macOS simply by visiting a webpage containing HTML and CSS. It does not need Javascript to be enabled so it also works while viewing HTML E-Mail (which you should never do anyway but tell that to the hipsters).

The following excerpt is especially exciting

Haddouche has told BleepingComputer that he has created an additional attack using HTML, CSS, and JavaScript that will totally freeze macOS computers. He has not released it as it persists after reboot and macOS will relaunch Safari with the malicious page as well, making the computer freeze again.

After Apple’s botched last year in regards to miserable security and ridiculous vulnerabilities one would assume they had gotten off their asses and shifted resources to fixing their swiss cheese of an operating system. But then again, pumping out new iPhones seems to be more important. Got to please the hipsters. I actually find it very much interesting how Apple and their operating systems went from “expensive but secure” to “expensive and utter garbage with more holes than a swiss cheese” over the recent three or so years. It is a perfect example what happens if you prioritize new products (quantity) over fixing your shit and delivering a well developed product (quality).