Zero click, silent, remote Android DoS (smsofdeath.com)
16 points by MarkBlah 2 hours ago
klhs 9 minutes ago
How could they possibly give this a "won't fix" if it can do what is reported here?
MarkBlah 2 minutes ago
mind boggles, issue is they're swamped with AI slop and high number of findings, they're using AI assistance operated by a 3rd party to handle researcher submissions so many legitimate findings slip through the cracks.
est 44 minutes ago
I remember there was a tel: link than when I clicked it wipes everything on my samsung phone
villgax 36 minutes ago
Shouldn’t click this reminder
MarkBlah a few seconds ago
feel free to curl it, or review the repo https://github.com/MarkBlah/smsofdeath/
0xcrypto an hour ago
Can we stop vibecoding a new website for every next vulnerability we find please? Thank you.
solyin an hour ago
Blame heartbleed for the practice, which long predates ChatGPT and vibecoding. Human psychology is to blame. Only nerds are going to find CVE-2014-0160 triggering, but if I say heartbleed everyone who was there remembers.
autoexec 22 minutes ago
> Only nerds are going to find CVE-2014-0160 triggering, but if I say heartbleed everyone who was there remembers.
That has more to do with the severity of heartbleed than the fact that it had a name and a logo. I've since seen a lot of vulnerabilities try to market themselves with websites, cute names, and stupid logos but I still don't remember them because they still just weren't big enough to actually be memorable.
__m 31 minutes ago
Why? I like the presentation.
MarkBlah 7 minutes ago
agreed, we should all use gopher and block all web traffic, go back to text based systems, use single threaded operating systems and use token ring NIC's