iOS 18.6.2 – System-Wide Trust Collapse via Anchor Corruption and ATS Reset (opens in new tab)

(github.com)

11 pointsmintplant6mo ago7 comments

7 comments

I’m seeing this even in RecoveryOS after a fresh MacOS install..

Can others check logs on MacOS and iOS devices?

Is this a hoax? I note that the article text has several of the hallmarks of LLM-generated text; em-dashes, not-just-this-but-that, short bullet point lists, random text bolding...

winkelmann6mo ago

Not the first time that user has been posted here: https://news.ycombinator.com/item?id=45072797 ("A16-FuseBypass: Debug Logic Enabled on Production Apple Silicon")

Edit:

"Apple A17 Pro Chip Hardware Flaw?" - https://news.ycombinator.com/item?id=45160947

"iOS 18.5 Bluetooth Privacy Vulnerabilities" - https://news.ycombinator.com/item?id=44933435

Both of these submissions are [flagged]. I suspect that OP takes iPhone device logs and feeds the to an LLM to come up with security issues.

mintplantOP6mo ago

Ah, welp! Egg on my face; I'll be less charitable with this sort of thing in the future.

Thanks for doing the digging. Unfortunately HN doesn't let you retract submissions, otherwise I would.

mintplantOP6mo ago

I noticed that, too, but I thought perhaps the write-up was simply "LLM-assisted".

I came across this while debugging the "Malformed anchor records, not an array" log message on iOS 18.6.2 and seeing weird behavior: some parts of the system suddenly rejecting certificates with an anchor error (the MDM layer) while other parts accepted them just fine (Safari). So that's n=2 for something being wrong with the trust system in recent iOS versions.

lambdaone6mo ago

If this was real, it would be a big, big deal, but I can't so far see anyone else in the security space picking this up as a story. Note also the GitHub history of the source.

ACSL8TER6mo ago

I mean the repo does have log evidence right? Sooo..

j / k navigate · click thread line to collapse

7 comments

traviscline6mo ago

I’m seeing this even in RecoveryOS after a fresh MacOS install..

Can others check logs on MacOS and iOS devices?

lambdaone6mo ago

Is this a hoax? I note that the article text has several of the hallmarks of LLM-generated text; em-dashes, not-just-this-but-that, short bullet point lists, random text bolding...

winkelmann6mo ago

Not the first time that user has been posted here: https://news.ycombinator.com/item?id=45072797 ("A16-FuseBypass: Debug Logic Enabled on Production Apple Silicon")

Edit:

"Apple A17 Pro Chip Hardware Flaw?" - https://news.ycombinator.com/item?id=45160947

"iOS 18.5 Bluetooth Privacy Vulnerabilities" - https://news.ycombinator.com/item?id=44933435

Both of these submissions are [flagged]. I suspect that OP takes iPhone device logs and feeds the to an LLM to come up with security issues.

mintplantOP6mo ago

Ah, welp! Egg on my face; I'll be less charitable with this sort of thing in the future.

Thanks for doing the digging. Unfortunately HN doesn't let you retract submissions, otherwise I would.

mintplantOP6mo ago

I noticed that, too, but I thought perhaps the write-up was simply "LLM-assisted".

lambdaone6mo ago

If this was real, it would be a big, big deal, but I can't so far see anyone else in the security space picking this up as a story. Note also the GitHub history of the source.

ACSL8TER6mo ago

I mean the repo does have log evidence right? Sooo..

j / k navigate · click thread line to collapse