In what some are calling the most anticipated event since a celebrity flea market, Apple has released its first round of Background Security Improvements, finally patching a pesky WebKit vulnerability. This issue was so old it practically had its own MySpace account.
The flaw, for those who aren’t cybersecurity sommeliers, involved a nefarious cross-origin issue in WebKit’s Navigation API, threatening to break down the Internetโs equivalent of a ‘No Trespassing’ signโthe same-origin policy. A crafty hacker couldโve wandered across your digital backyard like a nosy neighbor, peeking through your browser windows at will.
Given that this vulnerability is so notorious it didn’t even get a CVSS score, some imagined it mustโve been a sly inside joke among hackers: “How many Apple engineers does it take to fix a non-rated bug?” Apparently, the answer is “just enough to leave secure environments but not enough to prevent your smart toaster from joining the rebellion.”

Leave a Reply