Comments on: iPhone DRM Broken and Needs Fixed… http://fasterkittycodecode.com/coding/iphone-drm-broken-and-needs-fixed/ Wendy dev/blog Wed, 19 Oct 2011 09:11:31 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Merlyn http://fasterkittycodecode.com/coding/iphone-drm-broken-and-needs-fixed/comment-page-1/#comment-366 Merlyn Thu, 09 Jul 2009 06:27:48 +0000 http://fasterkittycodecode.com/?p=123#comment-366 While I know that piracy cuts into business (your business), I also think fixing bugs like this one could be tail-chasing. As long as any vulnerable portion of the OS is going to be programmed in a language that supports pointer arithmatic, unchecked buffers, or messy stack overflows, there will be exploits that allow arbitrary code execution. Pirates will always find a way. With no research or references to cite, I posit that people who are going to hack their $200-$400 device are unlikely to pay for software to begin with. As for security, I assume they're listing it as a non-security bug because it is less likely to be exploted to cause a nation of zombie-ddosing phones or keylog personal info than it is to be used to break DRM. Dunno, can't look at the bug w/o signing up. While I know that piracy cuts into business (your business), I also think fixing bugs like this one could be tail-chasing. As long as any vulnerable portion of the OS is going to be programmed in a language that supports pointer arithmatic, unchecked buffers, or messy stack overflows, there will be exploits that allow arbitrary code execution.

Pirates will always find a way. With no research or references to cite, I posit that people who are going to hack their $200-$400 device are unlikely to pay for software to begin with.

As for security, I assume they’re listing it as a non-security bug because it is less likely to be exploted to cause a nation of zombie-ddosing phones or keylog personal info than it is to be used to break DRM. Dunno, can’t look at the bug w/o signing up.

]]>