Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

How to unc0ver a 0-day in 4 hours or less

googleprojectzero.blogspot.com

Post reply on HN
Print view View original

61–70 of 120 posts

Re: How to unc0ver a 0-day in 4 hours or less

#61

Post by season2episode3 »

StavrosK wrote: post #60
aSockPuppeteer wrote: post #17

Earlier quoted context omitted.

It’s always a snake eating it’s tail scenario with jailbreaking. Apple takes popular tweaks and integrates them with the next IOS. Side-loading isn’t that bad but the method keeps changing...Usually for the better. Jail breaking cuts into their profit a small amount because the community is small. https://www.reddit.com/r/jailbreak The benefits are very much worth it though. Most have had iOS 13 features since iOS 11…

This raises the question, who will come up with Apple product features when all the 0days have been patched?

Yeah, I swear. They're a hardware company more than a software one... it shows in their utter lack of imagination for their software. Even their UI/UX design is really suffering compared to their competitors.

Disclaimer: I continue to use an iphone primarily because I'm happy and fine with the walled garden.

Re: How to unc0ver a 0-day in 4 hours or less

#62

Post by zaptrem »

BEEdwards wrote: post #59
aSockPuppeteer wrote: post #17

Earlier quoted context omitted.

It’s always a snake eating it’s tail scenario with jailbreaking. Apple takes popular tweaks and integrates them with the next IOS. Side-loading isn’t that bad but the method keeps changing...Usually for the better. Jail breaking cuts into their profit a small amount because the community is small. https://www.reddit.com/r/jailbreak The benefits are very much worth it though. Most have had iOS 13 features since iOS 11…

Or you could just buy an android and not worry about it. Not even to fan boy, but half of those are things that android did from the go and the rest have been added or are generally easy to do.

But then we miss out on Apple's hardware quality, industry-crushing A-Series processors, and (for the most part) rock solid and extremely efficient OS.

Re: How to unc0ver a 0-day in 4 hours or less

#63

Post by megablast »

BEEdwards wrote: post #59
aSockPuppeteer wrote: post #17

Earlier quoted context omitted.

It’s always a snake eating it’s tail scenario with jailbreaking. Apple takes popular tweaks and integrates them with the next IOS. Side-loading isn’t that bad but the method keeps changing...Usually for the better. Jail breaking cuts into their profit a small amount because the community is small. https://www.reddit.com/r/jailbreak The benefits are very much worth it though. Most have had iOS 13 features since iOS 11…

Or you could just buy an android and not worry about it. Not even to fan boy, but half of those are things that android did from the go and the rest have been added or are generally easy to do.

And worry about something else, like it exploding, or not getting security updates after the first year, or boot loop, etc.

Re: How to unc0ver a 0-day in 4 hours or less

#64

Post by strombofulous »

megablast wrote: post #63
BEEdwards wrote: post #59

Earlier quoted context omitted.

Or you could just buy an android and not worry about it. Not even to fan boy, but half of those are things that android did from the go and the rest have been added or are generally easy to do.

And worry about something else, like it exploding, or not getting security updates after the first year, or boot loop, etc.

> Like it exploding

That was an issue with one phone, once, and it was a problem with the battery, not Android

> Not getting security updates after the first year

That's actually solved by rooting since you can update from any source instead of just signed packages

> Boot loop

I guess that could be a problem but I've never had that issue and I've rooted all but one phone that I've had

Re: How to unc0ver a 0-day in 4 hours or less

#65

Post by p1necone »

megablast wrote: post #63
BEEdwards wrote: post #59

Earlier quoted context omitted.

Or you could just buy an android and not worry about it. Not even to fan boy, but half of those are things that android did from the go and the rest have been added or are generally easy to do.

And worry about something else, like it exploding, or not getting security updates after the first year, or boot loop, etc.

You need to do a bit more research because of the sheer number of options, but there's absolutely manufacturers that have none of those issues (battery exploding was one samsung model, I haven't heard of boot loop issues. Poor security update lifetime is absolutely a common issue though, although fixable by rooting as pointed out in another comment). See: Android One^.

^https://en.wikipedia.org/wiki/Android_One

Re: How to unc0ver a 0-day in 4 hours or less

#66

Post by wrkronmiller »

wolco wrote: post #49
yunruse wrote: post #25

Earlier quoted context omitted.

It is likely this is a heuristic; Apple would lose out disallowing major companies, so rules are sometimes shifted, if not explicitly for all. Snapchat being pulled would cause a minor exodus, I imagine, especially if it was heavily leaned on that Apple were responsible for their removal.

It would probably kill snapchat and force many groups to other platforms.

It’s possible for both to happen. People might switch chat apps in the short term, but reconsider buying an iPhone in the next cycle (esp. if Apple makes a habit of killing off popular apps).

Re: How to unc0ver a 0-day in 4 hours or less

#67

Post by hnick »

secondraft wrote: post #50
staycoolboy wrote: post #31

FTA: "...the LightSpeed bug was fixed in iOS 12 with a patch that didn't address the root cause and instead just turned the race condition double-free into a memory leak. Then, in iOS 13, this memory leak was identified as a bug and "fixed" by reintroducing the original bug, again without addressing the root cause of the issue..." Ooof. Talk about running in circles. Either this was someone who is swamped with work a…

> Talk about running in circles. So maybe writing and reading useful commit logs is not such a bad idea after all :) Reminds me of this quote: "Those who don't know their history are doomed to repeat it."

Or comments in code. They are very useful when pointing out gotchas.

Re: How to unc0ver a 0-day in 4 hours or less

#68

Post by lilyball »

devenblake wrote: post #3

> By 1 AM, I had sent Apple a POC and my analysis. > Still, I'm very happy that Apple patched this issue in a timely manner once the exploit became public. Sh- should we be happy Apple fixed this so quickly? unc0ver allows consumers to get more out of their Apple devices, and Apple's fix isn't really optional (unless you disable auto-updates and tap "Later" on every update notification). Is this exploit even an issue…

The existence of jailbreaking fundamentally breaks the security of the device. It means any malicious app that manages to get on your device can turn into a full system compromise. It means any RCE can as well.

Re: How to unc0ver a 0-day in 4 hours or less

#69

Post by dahfizz »

TwoBit wrote: post #51
akersten wrote: post #44

> So, to summarize: the LightSpeed bug was fixed in iOS 12 with a patch that didn't address the root cause and instead just turned the race condition double-free into a memory leak. Then, in iOS 13, this memory leak was identified as a bug and "fixed" by reintroducing the original bug, again without addressing the root cause of the issue. And this security regression could have been found trivially by running the ori…

Isn't the root cause that two entities can free the given memory and have no high level coordination of it? It basically states this in the article.

That's a bit like saying the root cause of an automobile accident is that two people were driving without a physical barrier between them.

The statement is true but is not a root or a cause. Its a high level description of what happened.

Re: How to unc0ver a 0-day in 4 hours or less

#70

Post by ueouieodue »

strombofulous wrote: post #64
megablast wrote: post #63

Earlier quoted context omitted.

And worry about something else, like it exploding, or not getting security updates after the first year, or boot loop, etc.

> Like it exploding That was an issue with one phone, once, and it was a problem with the battery, not Android > Not getting security updates after the first year That's actually solved by rooting since you can update from any source instead of just signed packages > Boot loop I guess that could be a problem but I've never had that issue and I've rooted all but one phone that I've had

> That was an issue with one phone, once, and it was a problem with the battery, not Android

If my house burns down, I personally won't care if it's android in general, the model, or the battery in the android phone which destroyed everything I own.

> That's actually solved by rooting since you can update from any source instead of just signed packages

Installing software downloaded from xda-developers is, what I like to call, malware as a service (tm).

Post reply on HN