Oh, Apple actually has vulnerabilities?
Post
--
肥猫
·
--
This isn’t meant to spread panic, just to give you a heads-up: that Apple “vulnerability” is real... I just saw a lot of people in the community doubting it, so I’ll tell you directly: it does exist, and I tested it a couple of days ago. I can confirm it works.
The principle is to inject a specific piece of JavaScript into any frontend page. Then, as long as someone using an Apple device clicks the URL directly in the Safari browser, no authorization prompt appears at any point, and data can be collected from the device. Others are saying it’s just a joke, but I actually tried it, and it really works. In other words, it can be disguised as any website, even content that has nothing to do with cryptocurrency.
Here’s what you can do to protect yourself: 1. Upgrade to the latest version of iOS (the version currently circulating doesn’t work on the latest iOS version). 2. Download Google Chrome and don’t use Safari. 3. Don’t open links if you don’t know what they’re for. 4. Don’t save your recovery phrase locally on your phone—not in Notes, as a photo, or in a screenshot.
Below is a screenshot of the test results from a couple of days ago.
Technology itself is not to blame. Please don’t use it for malicious purposes.
The principle is to inject a specific piece of JavaScript into any frontend page. Then, as long as someone using an Apple device clicks the URL directly in the Safari browser, no authorization prompt appears at any point, and data can be collected from the device. Others are saying it’s just a joke, but I actually tried it, and it really works. In other words, it can be disguised as any website, even content that has nothing to do with cryptocurrency.
Here’s what you can do to protect yourself: 1. Upgrade to the latest version of iOS (the version currently circulating doesn’t work on the latest iOS version). 2. Download Google Chrome and don’t use Safari. 3. Don’t open links if you don’t know what they’re for. 4. Don’t save your recovery phrase locally on your phone—not in Notes, as a photo, or in a screenshot.
Below is a screenshot of the test results from a couple of days ago.
Technology itself is not to blame. Please don’t use it for malicious purposes.