New Exploit Breaks the iPhone's Messaging App with One Text
tomshardware.com
New Exploit Breaks the iPhone's Messaging App with One Text
1–10 of 40 posts
Re: New Exploit Breaks the iPhone's Messaging App with One Text
#2Serious question: this is the third time a exploit of this kind is publicly revealed for this app. How comes we don't see a global hack outbreak?
I mean, script kiddies would love to break millions of phones. What has stopped them from doing that so far?
Re: New Exploit Breaks the iPhone's Messaging App with One Text
#3Serious question: this is the third time a exploit of this kind is publicly revealed for this app. How comes we don't see a global hack outbreak? I mean, script kiddies would love to break millions of phones. What has stopped them from doing that so far?
Even the best script kiddie would get bloody fingers trying to type in every possible phone number or iCloud address
There's no API. No real way to automate.
Re: New Exploit Breaks the iPhone's Messaging App with One Text
#4Serious question: this is the third time a exploit of this kind is publicly revealed for this app. How comes we don't see a global hack outbreak? I mean, script kiddies would love to break millions of phones. What has stopped them from doing that so far?
Even the best script kiddie would get bloody fingers trying to type in every possible phone number or iCloud address There's no API. No real way to automate.
A robotic auto-dialer could fix that. Perhaps an app on a jailbroken phone could inject numbers into the input field?
Re: New Exploit Breaks the iPhone's Messaging App with One Text
#5Serious question: this is the third time a exploit of this kind is publicly revealed for this app. How comes we don't see a global hack outbreak? I mean, script kiddies would love to break millions of phones. What has stopped them from doing that so far?
Sending texts isn't free. Not many people are going to be willing to pay 5 cents a pop just to piss people off on a large scale.
Re: New Exploit Breaks the iPhone's Messaging App with One Text
#6Serious question: this is the third time a exploit of this kind is publicly revealed for this app. How comes we don't see a global hack outbreak? I mean, script kiddies would love to break millions of phones. What has stopped them from doing that so far?
Sending texts isn't free. Not many people are going to be willing to pay 5 cents a pop just to piss people off on a large scale.
Sending iMessage is 'free'
Re: New Exploit Breaks the iPhone's Messaging App with One Text
#7Serious question: this is the third time a exploit of this kind is publicly revealed for this app. How comes we don't see a global hack outbreak? I mean, script kiddies would love to break millions of phones. What has stopped them from doing that so far?
The motivation is pretty weak. If people found a way to make money by doing this, it would be massively exploited. But the reward for breaking a bunch of phones is... self satisfaction? ok.
Re: New Exploit Breaks the iPhone's Messaging App with One Text
#8Earlier quoted context omitted.
Even the best script kiddie would get bloody fingers trying to type in every possible phone number or iCloud address There's no API. No real way to automate.
A robotic auto-dialer could fix that. Perhaps an app on a jailbroken phone could inject numbers into the input field?
It'd be easier to automate the Messages app on an OS X device.
Another concern would be that Apple is likely to deactivate an ID used to send this kind of malicious spam at any sort of scale.
Re: New Exploit Breaks the iPhone's Messaging App with One Text
#9Serious question: this is the third time a exploit of this kind is publicly revealed for this app. How comes we don't see a global hack outbreak? I mean, script kiddies would love to break millions of phones. What has stopped them from doing that so far?
Even the best script kiddie would get bloody fingers trying to type in every possible phone number or iCloud address There's no API. No real way to automate.
Messages on the mac can be automated with applescript.
tell application "Messages"
send "This is an iMessage" to buddy "foo@bar.com" of (service 1 whose service type is iMessage)
send "This is an SMS" to buddy "+1234567890" of service "SMS"
end tellRe: New Exploit Breaks the iPhone's Messaging App with One Text
#10Earlier quoted context omitted.
A robotic auto-dialer could fix that. Perhaps an app on a jailbroken phone could inject numbers into the input field?
It'd be easier to automate the Messages app on an OS X device. Another concern would be that Apple is likely to deactivate an ID used to send this kind of malicious spam at any sort of scale.
> Another concern would be that Apple is likely to deactivate an ID used to send this kind of malicious spam at any sort of scale.
Apple IDs can be easily remade. ProductIDs can be faked on a Hackintosh.