iPhone Bug Freezes Your Phone With Just One Link -- Security Today

iPhone Bug Freezes Your Phone With Just One Link

The chaiOS bug can freeze or restart your phone without even having to click the link.

By Sydny Shepard
Jan 19, 2018

Imagine receiving a text from someone, you open the thread and see the text is actually a link. Before you even click on the link, your phone freezes up or restarts, throwing you into a panic. Unfortunately, this can happen. It is the exact bug software developer Abraham Masri found in iPhones this past week.

Masri announced the bug, which he aptly named "chaiOS," on his Twitter account and explain that it exploits the fact that iMessages preloads any links to webpages so it can show users a preview of the page. In an interview with Buzzfeed News, Masri explained that he create a webpage hosed on GitHub and stuffed its metadata with hundreds of thousands of unnecessary characters causing your phone to crash when trying to load all of the unexpected information, sometimes taking the entire operating system down with it.

In other news, I found a (small) bug that causes device to freeze, respring, drains battery, and/or sometimes panic.
No need to install anything. Just open, tap then paste. (iOS only).https://t.co/4PxjA6oqiy
thanks to @aaronp613 @garnerlogan65 @lepidusdev @brensalsa for testing
— Abraham Masri (@cheesecakeufo) January 16, 2018

Initially, Masri had posted a link that used the chaiOS in a Tweet on his account, but the page, and a few others that mirror the bug, has since been taken down by the host site. Masri said he isn't going to re-upload the bug, saying he only released it to "get Apple's attention."

No, I'm not going to re-upload it. I made my point. Apple needs to take such bugs more seriously.
— Abraham Masri (@cheesecakeufo) January 17, 2018

Apple has announced they will release a fix for the bug next week.

About the Author

Sydny Shepard is the Executive Editor of Campus Security & Life Safety.

Featured

AI Used as Part of Sophisticated Espionage Campaign

A cybersecurity inflection point has been reached in which AI models has become genuinely useful in cybersecurity operation. But to no surprise, they can used for both good works and ill will. Systemic evaluations show cyber capabilities double in six months, and they have been tracking real-world cyberattacks showing how malicious actors were using AI capabilities. These capabilities were predicted and are expected to evolve, but what stood out for researchers was how quickly they have done so, at scale. Read Now
- Artificial Intelligence
Why the Future of Video Security Is Happening Outside the Cloud

For years, the cloud has captivated the physical security industry. And for good reasons. Remote access, elastic scalability and simplified maintenance reshaped how we think about deploying and managing systems. Read Now
- Video Surveillance
UL Solutions Launches Artificial Intelligence Safety Certification Services

UL Solutions Inc., a global leader in safety science, today announced the launch of artificial intelligence (AI) safety certification services, enabling comprehensive assessments for evaluating the safety of AI-powered products. Read Now
- Artificial Intelligence
ESA Announces Initiative to Introduce the SECURE Act in State Legislatures

The Electronic Security Association (ESA), the national voice for the electronic security and life safety industry, has announced plans to introduce the SECURE Act in state legislatures across the country beginning in 2025. The proposal, known as Safeguarding Election Candidates Using Reasonable Expenditures, provides a clear framework that allows candidates and elected officials to use campaign funds for professional security services. Read Now
- Guard Services
Ransomware Attacks Rise for the First Time in Six Months

Ransomware attacks have risen for the first time in six months, increasing by 28% month-on-month to 421 attacks. While overall attack volume remained below 500, the uptick may signal a renewed escalation heading into the year’s most active period for cyber criminals. Read Now
- Cybersecurity

Security Today eNews

Sign up today for essential industry news and product information that can help you stay afloat in the fast-paced world of security.

Email Address*Country*

Please type the letters/numbers you see above.

Webinars

Whitepapers

New Products

QCS7230 System-on-Chip (SoC)

The latest Qualcomm® Vision Intelligence Platform offers next-generation smart camera IoT solutions to improve safety and security across enterprises, cities and spaces. The Vision Intelligence Platform was expanded in March 2022 with the introduction of the QCS7230 System-on-Chip (SoC), which delivers superior artificial intelligence (AI) inferencing at the edge.
FEP GameChanger

Paige Datacom Solutions Introduces Important and Innovative Cabling Products GameChanger Cable, a proven and patented solution that significantly exceeds the reach of traditional category cable will now have a FEP/FEP construction.
Connect ONE®

Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.