TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

iOS 13 bug grants third-party keyboards full access to iPhones

77 点作者 electic超过 5 年前

6 条评论

nyc640超过 5 年前
I know your title is from the title of the article, but it&#x27;s pretty misleading.<p>Just to clear things up, it seems like the bug grants the &quot;Full Access&quot; permission to 3rd party keyboards which allows them to make network requests (phone home) based on what you are typing while you have that specific keyboard opened. It doesn&#x27;t grant the keyboards full access to anything on your iPhone, which is what the title makes it sound like.<p>edit: Here is a link to the Apple support article, which is a little clearer: <a href="https:&#x2F;&#x2F;support.apple.com&#x2F;en-us&#x2F;HT210613" rel="nofollow">https:&#x2F;&#x2F;support.apple.com&#x2F;en-us&#x2F;HT210613</a>
评论 #21065891 未加载
评论 #21066357 未加载
parsimo2010超过 5 年前
The stock iOS 13 keyboard has swipe now, which means that I don’t need a third party keyboard anymore, which I assume was sending everything I typed to some server for advertising purposes.
评论 #21066955 未加载
mmgutz超过 5 年前
Thankfully, I was finally able to uninstall gboard (google&#x27;s swipe keyboard). Don&#x27;t know why it took Apple so long to implement swipe keyboard feature.
评论 #21065770 未加载
评论 #21065687 未加载
notmyfuture超过 5 年前
I will admit to not actually looking at how third-party keyboards are implemented (specifically, how are security risks mitigated), but have always stayed away from them on instinct. For me, the potential value just doesn&#x27;t outweigh risk.
评论 #21066118 未加载
fouc超过 5 年前
Can anyone recommend some great third-party keyboards that do not depend on the &quot;full access&quot; ability to phone home?
评论 #21067047 未加载
评论 #21066944 未加载
评论 #21066039 未加载
newscracker超过 5 年前
First we have a security issue in iOS 13.0 — a lock screen bypass vulnerability which isn’t easy to exploit — that should’ve been fixed before mass release. But Apple wanted iOS 13 to be out for all iOS users for the launch of the new iPhones 11. So we get iOS 13.1 in a week (Sep 24) from iOS 13.0.<p>Now we find that a much more severe issue with unexpectedly granting third party keyboards Full Access is yet to be fixed. Shouldn’t this issue take higher priority (not implying that the same teams work on all security issues)? This seems like a betrayal of trust. Nobody would expect a third party keyboard to get Full Access and transmit all keystrokes over the network unless they granted that permission.<p>Is Apple now planning to release iOS 13.1.1 or iOS 13.2 by September 30 with the fix for this and some more fixes for stability?<p>It seems like the beta testing cycle still going on for iOS 13.0.<p>Apple has focused on better performance over the last two years and shown good results (older devices don’t slow down as much with newer iOS releases as in the distant past), but stability and security both seem to have taken a hit within Apple’s technical abilities and processes, as is evident from the revelations, from Google’s Project Zero and others, in the last few months or so.
评论 #21065767 未加载
评论 #21073324 未加载