On: WiFi SSIDs in Apple iOS have a format string vulnerability

[EricE]

Always validate input.

ALWAYS.

[comex → EricE]

There’s nothing invalid about an SSID containing percent characters.

[olliej → EricE]

Better yet don’t put attacker controlled strings into format string arguments :-/