These dudes are insane. I wonder how much exploits like this are worth…
0-click for iphone up to around 10 million
other 0-days for iphone up to around 2 million
NSO group iPhone zero-click, zero-day exploit captured in the wild
191–200 of 886 posts
Re: NSO group iPhone zero-click, zero-day exploit captured in the wild
#192Earlier quoted context omitted.
What is frustrating is the NSO group continues to exist despite all the bad they do. How many people are they responsible for being on the receiving end of a bone saw?
If they didn’t exist it would be a different company in Russia or China. The demand exists.
Allowing a US+Israel-approved* company to do this makes higher revenues possible, meaning they can attract higher talent => more hacks. Which would be fine if we prevented them from selling to unwanted customers. With weapons, we control who gets them, regardless of money.
* I was going to say "sanctioned," but that word can mean two entirely opposite things, it's dumb
Re: NSO group iPhone zero-click, zero-day exploit captured in the wild
#193Earlier quoted context omitted.
And a much older bug with TIF rendering in iOS 4 used by jailbreakme.com back in the day. It was wonderful pressing a button in Safari and suddenly seeing my iPod touch reboot with Cydia installed.
I would describe a one click rootkit as terrifying as opposed to wonderful.
I also find the inability to get root on my device terrifying
Re: NSO group iPhone zero-click, zero-day exploit captured in the wild
#194Again a buffer overflow in image decoding, that sounds similar to the one from 2021 [1]. That one was wild, building a CPU out of primitives offered by an arcane image compression format embedded in pdf, to be able to do enough arithmetic to further escalate to arbitrary code execution! [1]: https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-i...
Again buffer overflow in image decoding. Would think apple might just #threatmodel and #fuzz that to death... but you would be wrong. 2.7T market cap company can't do this...
They do, but some of these bugs are beyond what fuzzing can do. We don’t know that this is a buffer overflow or how complex the exploit chain was - the one linked above was anything but something you’d get by fuzzing.
I agree it is disappointing that this stuff isn’t all Rust or Swift yet but that’s in process. Of particular interest, did you notice how the new Lockdown mode is apparently a countermeasure? I would not be surprised to see some of those motivations expand into the base OS as they have time to improve.
Re: NSO group iPhone zero-click, zero-day exploit captured in the wild
#195Re: NSO group iPhone zero-click, zero-day exploit captured in the wild
#196Wow this sounds like stagefright was way back when. So for those keeping score, is Android now ahead of iOS in this aspect of security?
I’d put money on there being an Android variant of Pegasus out there in the wild right now.
Re: NSO group iPhone zero-click, zero-day exploit captured in the wild
#197Earlier quoted context omitted.
At least they’re trying? Meanwhile Google has spent 2 decades refusing to release a messenger that encrypts by default because they think they should be able to mine all your personal conversations. I take that back, they announced encrypted messaging, then never released it, then probably fired the engineer who said it’d be a feature in allo (or whatever their last attempt was).
Your comment does not make sense at all. You are confusing security (no exploits) with privacy (encryption). The iMessage system is really private (no third party not even Apple can read your messages) but traditionally full of security holes (messages once decrypted can harm the rest of your device).
> no third party not even Apple can read your messages
This is not something that can be stated as fact unless 3rd party clients for a service exist. Apple can, with complete honesty, claim that messages are encrypted at rest/in transit all they want, but since they publish the only implementation of the client, they can modify it at any time to expose the messages to them, in any number of ways.
Re: NSO group iPhone zero-click, zero-day exploit captured in the wild
#198So at what point does the world bring sanctions against Israel for allowing organizations like this to exist there? Everyone knows NSO is just a dubiously legal version of common APT groups, so how do they still exist after these years?
You’re asking why Walmart shoppers are not demanding Walmart be closed down
Re: NSO group iPhone zero-click, zero-day exploit captured in the wild
#199[deleted]
Re: NSO group iPhone zero-click, zero-day exploit captured in the wild
#200Again a buffer overflow in image decoding, that sounds similar to the one from 2021 [1]. That one was wild, building a CPU out of primitives offered by an arcane image compression format embedded in pdf, to be able to do enough arithmetic to further escalate to arbitrary code execution! [1]: https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-i...
Wow that’s impressive.