Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

NSO group iPhone zero-click, zero-day exploit captured in the wild

citizenlab.ca

Post reply on HN
Print view View original

31–40 of 886 posts

Re: NSO group iPhone zero-click, zero-day exploit captured in the wild

#31

Post by fatfingerd »

tw04 wrote: post #4
parhamn wrote: post #3

> The exploit involved PassKit attachments containing malicious images sent from an attacker iMessage account to the victim. Man, iMessage is a security disaster for Apple. No matter how much work they do in other areas, it seems like they'll paying for a while for their decisions around the iMessage architecture.

At least they’re trying? Meanwhile Google has spent 2 decades refusing to release a messenger that encrypts by default because they think they should be able to mine all your personal conversations. I take that back, they announced encrypted messaging, then never released it, then probably fired the engineer who said it’d be a feature in allo (or whatever their last attempt was).

I liked that Google lets you register a different handler for SMS which is at least part way to letting us shut off that 0-click crap channel.

Re: NSO group iPhone zero-click, zero-day exploit captured in the wild

#32

Post by ReptileMan »

purkka wrote: post #9
MiguelHudnandez wrote: post #5

These fixes came out today, apparently timed with the announcement, make sure updates are applied for you and yours. https://support.apple.com/en-us/HT201222

Interestingly, no kernel vulnerability or anything is mentioned. As far as I know, any parsing code for iMessages should run within the BlastDoor sandbox – is there another vulnerability in the chain that is not reported here?

Probably 3 - sandbox escape, being able to launch a process in privileged mode and something that adds to the kernel table of allowed hashes.

But it is totally possible for them to have been able only to identify one of them if they didn't intercept the whole attack.

Re: NSO group iPhone zero-click, zero-day exploit captured in the wild

#35

Post by robear »

s3p wrote: post #10
robear wrote: post #8

Earlier quoted context omitted.

Isn't Messages E2E by default?

iMessage or android messages? iMessage is E2E by default, unless one or more parties own multiple apple devices, in which case apple stores an encryption key on iCloud and maintains E2EE connections with every connected Apple device. This changes if you turn on Advanced data protection-- then iCloud no longer has the ability to decrypt messages. Somewhat unrelated but ADP is off by default as most customers do not wa…

Android Messages, the competitor to iMessage. The parent claimed that Google resists encrypting anything so they can mine your data. I was merely trying to ask for accuracy. I don't know the technical aspects of every Google messaging app but as the other responses in the thread confirm, Messages is end to end encrypted by default for non-SMS messages.

Re: NSO group iPhone zero-click, zero-day exploit captured in the wild

#36

Post by kccqzy »

tw04 wrote: post #4
parhamn wrote: post #3

> The exploit involved PassKit attachments containing malicious images sent from an attacker iMessage account to the victim. Man, iMessage is a security disaster for Apple. No matter how much work they do in other areas, it seems like they'll paying for a while for their decisions around the iMessage architecture.

At least they’re trying? Meanwhile Google has spent 2 decades refusing to release a messenger that encrypts by default because they think they should be able to mine all your personal conversations. I take that back, they announced encrypted messaging, then never released it, then probably fired the engineer who said it’d be a feature in allo (or whatever their last attempt was).

Your comment does not make sense at all.

You are confusing security (no exploits) with privacy (encryption). The iMessage system is really private (no third party not even Apple can read your messages) but traditionally full of security holes (messages once decrypted can harm the rest of your device).

Re: NSO group iPhone zero-click, zero-day exploit captured in the wild

#37

Post by kylemh »

pseudo0 wrote: post #23

Here we go again... NSO Group has a long history of 0-click, 0-days against iMessage, and just a few months ago Kaspersky caught a different zero day iMessage exploit targeting their staff. If Apple repeatedly fails at securing their devices from an attack vector that has been demonstrated over, and over, and over... no wonder China is banning government officials from using their devices.

sure, that's why China is banning gov't officials from using their devices...

Re: NSO group iPhone zero-click, zero-day exploit captured in the wild

#38

Post by zshrc »

pseudo0 wrote: post #23

Here we go again... NSO Group has a long history of 0-click, 0-days against iMessage, and just a few months ago Kaspersky caught a different zero day iMessage exploit targeting their staff. If Apple repeatedly fails at securing their devices from an attack vector that has been demonstrated over, and over, and over... no wonder China is banning government officials from using their devices.

Please... Androids no better. At least Apple will have it patched within the year of discovery. Can't say the same for other Android vendors.

Re: NSO group iPhone zero-click, zero-day exploit captured in the wild

#40

Post by FirmwareBurner »

scarface_74 wrote: post #27

[flagged]

1) What does this topic have to do with Android?

2) EU politicians don't know about Android updates because they don't understand how SW works and most probably have iOS anyway. The only time they hear about tech is when some Joe Schmoe insults them on Facebook so they send the courts after Facebook to doxx that person and get Facebook to moderate and ban "hate speech" on their platform. All in a day's work.

Granted, US politicians don't understand how tech works either, judging by the senate hearing of TikTok CEO ("Mr. CEO, can TikTok access my WiFi?"), but they have a powerful local tech industry to tell politicians what they should lobby for, while the EU doesn't.

Post reply on HN