Psychic Paper

RIP my very first 0day and absolute best sandbox escape ever:

<!-- -->

Tweet that demonstrates a recent zero-day (now patched) in iOS. This serves as your annual reminder that parsing xml-like things is a fraught activity.

Have a comment? Send an email to my public inbox. Please follow proper mail etiquette.