Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

NSO group iPhone zero-click, zero-day exploit captured in the wild

citizenlab.ca

Post reply on HN
Print view View original

51–60 of 886 posts

Re: NSO group iPhone zero-click, zero-day exploit captured in the wild

#51

Post by zelphirkalt »

curiousgal wrote: post #34
scarface_74 wrote: post #27

[flagged]

I've never met a person who threw away a phone because of the lack of updates.

Maybe not throw away but give away. Just look at how many people buy a new phone every 2 years or even shorter period. Something must happen to their old phones.

Re: NSO group iPhone zero-click, zero-day exploit captured in the wild

#53

Post by onionisafruit »

s3p wrote: post #17
aborsy wrote: post #12

I wonder if the lockdown mode would have prevented this attack? Has an iPhone in the lockdown mode been hacked so far, using a zero day vulnerability (not tricking the user to install a malicious program)?

It does. The page even recommends lockdown mode as a mitigation for affected parties (people who aren't updated)

I think that is a general recommendation in the linked post, not specifically for this issue.

Re: NSO group iPhone zero-click, zero-day exploit captured in the wild

#54

Post by tareqak »

scarface_74 wrote: post #27

[flagged]

I just checked for updates for my Apple Watch as well, and I see an update for it ("This update provides important security fixes and is recommended for all users" - watchOS 9.6.2). I remember attempting to update earlier in the week (Tuesday?), and I don't remember seeing anything that day. I don't know if the update is related or not, but I decided to share anyway.

Re: NSO group iPhone zero-click, zero-day exploit captured in the wild

#57

Post by arecurrence »

We're all very lucky that CitizenLab exists as they are often the first discovery point of numerous similar exploits. They proactively scan the phones of internationally sensitive people and publish their findings. I'm not aware of any other public service that has had this much success exposing mobile device attacks. Attacks which have completely and utterly compromised the entire device that someone keeps with them all day every day.

I tip my hat to CitizenLab and the good work they do.

Re: NSO group iPhone zero-click, zero-day exploit captured in the wild

#58

Post by threeseed »

FirmwareBurner wrote: post #40
scarface_74 wrote: post #27

[flagged]

1) What does this topic have to do with Android? 2) EU politicians don't know about Android updates because they don't understand how SW works and most probably have iOS anyway. The only time they hear about tech is when some Joe Schmoe insults them on Facebook so they send the courts after Facebook to doxx that person and get Facebook to moderate and ban "hate speech" on their platform. All in a day's work. Granted,…

> What does this topic have to do with Android

It's to do with whether Android as a platform is patching older devices.

If they aren't then it may be better for everyone that they are destroyed rather than allowing them to be compromised and exposing security risks to the user.

Re: NSO group iPhone zero-click, zero-day exploit captured in the wild

#60

Post by threeseed »

curiousgal wrote: post #34
scarface_74 wrote: post #27

[flagged]

I've never met a person who threw away a phone because of the lack of updates.

It is extremely common.

Most older devices are unable to run newer apps as the newer SDKs are not present.

Post reply on HN