iOS 18.6.2 – System-Wide Trust Collapse via Anchor Corruption and ATS Reset
github.comI’m seeing this even in RecoveryOS after a fresh MacOS install..
Can others check logs on MacOS and iOS devices?
Is this a hoax? I note that the article text has several of the hallmarks of LLM-generated text; em-dashes, not-just-this-but-that, short bullet point lists, random text bolding...
Not the first time that user has been posted here: https://news.ycombinator.com/item?id=45072797 ("A16-FuseBypass: Debug Logic Enabled on Production Apple Silicon")
Edit:
"Apple A17 Pro Chip Hardware Flaw?" - https://news.ycombinator.com/item?id=45160947
"iOS 18.5 Bluetooth Privacy Vulnerabilities" - https://news.ycombinator.com/item?id=44933435
Both of these submissions are [flagged]. I suspect that OP takes iPhone device logs and feeds the to an LLM to come up with security issues.
Ah, welp! Egg on my face; I'll be less charitable with this sort of thing in the future.
Thanks for doing the digging. Unfortunately HN doesn't let you retract submissions, otherwise I would.
I noticed that, too, but I thought perhaps the write-up was simply "LLM-assisted".
I came across this while debugging the "Malformed anchor records, not an array" log message on iOS 18.6.2 and seeing weird behavior: some parts of the system suddenly rejecting certificates with an anchor error (the MDM layer) while other parts accepted them just fine (Safari). So that's n=2 for something being wrong with the trust system in recent iOS versions.
If this was real, it would be a big, big deal, but I can't so far see anyone else in the security space picking this up as a story. Note also the GitHub history of the source.
I mean the repo does have log evidence right? Sooo..