Hacker News Reader

That might sound good in theory by in practice it's unlikely to go well(by default).

Many services from banks to healthcare utilize SMS as a main way of communicating with end-users. many rely on dynamic numbers.

Moreover, spoofing SMS messages is not that hard.

Messaging apps whether it is SMS or alternatives like whatsapp, telegram etc. will always offer a powerful vector to infect devices.

View on HN

I think banks don't use inline media in their messages too often.

It is part of my job. many banks do. often embarrassingly so.

you have made an argument against _never_ parsing media from untrusted _SMSs_

This is iMessage, and instead of _never_ parsing, requiring user action to parse. It will cut out the majority of the noclick exploits, and make iphones safer for most people.

This of course doesn't protect against spear phishing. But it should give apple time to fix their shit.

Reply on news.ycombinator.com