Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability

joshua.hu

Post reply on HN
Print view View original

181–190 of 242 posts

Re: No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability

#181

Post by tjoff »

daft_pink wrote: post #178

I feel this is misleading as most iPhone users are totally aware that iPhone Models not running iOS 17 are not being actively updated. The list is widely published: https://support.apple.com/guide/iphone/models-compatible-wit... Any model more than 5 years old (Xr and Xs) are essentially not being updated and not secure. So an iPhone 1, 3, 5, 6, 7, 8 and X are all not secure and most people who use the iPhone are tot…

This is about the browser, not the OS. The unique thing about apple is that they tie the browser to the OS. So you won't even get application updates, which is quite surprising for anyone that has ever touched a computer.

That is some Windows 98 nonsense right there.

Re: No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability

#182

Post by flanked-evergl »

mattl wrote: post #69
Sytten wrote: post #50

That is why I am an android dude, you will always find a random ROM on xda with the latest android security patch and sometimes even the latest android version on devices 10+ years old even if the manufacturer has stopped supporting it a while ago.

How does a random image help most users?

I guess bricking your device makes security irrelevant

Re: No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability

#183

Post by usui »

fouc wrote: post #129
usui wrote: post #98

Earlier quoted context omitted.

A 4-inch screen size that allows the phone to be used single-handed with ease anywhere on the screen, which I’m using to write this comment right now. It’s uncompromising in battery longevity when considering its size, too. First-gen SE is the best phone Apple ever made. The newer SE are terrible.

As someone that went from 5S to 2016 SE to 2020 SE which is my current phone, I've been very satisfied with the 2020 SE. With each phone I have always taken steps to reduce battery usage, disabled background refresh, and manually turn on low power mode after charging every single time.

Is your hand large enough to handle the phone one-handed and touch anywhere on the screen with ease without risking a drop? If not, do you use some kind of magnet finger-ring case or similar case?

Re: No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability

#184

Post by adrianN »

daft_pink wrote: post #178

I feel this is misleading as most iPhone users are totally aware that iPhone Models not running iOS 17 are not being actively updated. The list is widely published: https://support.apple.com/guide/iphone/models-compatible-wit... Any model more than 5 years old (Xr and Xs) are essentially not being updated and not secure. So an iPhone 1, 3, 5, 6, 7, 8 and X are all not secure and most people who use the iPhone are tot…

I’m pretty sure most iPhone users are unaware of which version of iOS they run.

Re: No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability

#186

Post by cyphar »

daft_pink wrote: post #178

I feel this is misleading as most iPhone users are totally aware that iPhone Models not running iOS 17 are not being actively updated. The list is widely published: https://support.apple.com/guide/iphone/models-compatible-wit... Any model more than 5 years old (Xr and Xs) are essentially not being updated and not secure. So an iPhone 1, 3, 5, 6, 7, 8 and X are all not secure and most people who use the iPhone are tot…

This is addressed in the second paragraph of the article. The iPhone 6S had an OS update in October 2023 (iOS 15.8) which included a security fix for a different issue. The Chromium security issue was fixed in June 2023.

Re: No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability

#187

Post by acer4666 »

e40 wrote: post #180
daft_pink wrote: post #178

I feel this is misleading as most iPhone users are totally aware that iPhone Models not running iOS 17 are not being actively updated. The list is widely published: https://support.apple.com/guide/iphone/models-compatible-wit... Any model more than 5 years old (Xr and Xs) are essentially not being updated and not secure. So an iPhone 1, 3, 5, 6, 7, 8 and X are all not secure and most people who use the iPhone are tot…

According to the link Xs is supported.

The parent comment says this - anything _older_ than XR or XS is no longer supported

Re: No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability

#188

Post by andrepd »

blacksoil wrote: post #159
izacus wrote: post #152

Earlier quoted context omitted.

> I do wish legislators forced Apple and Google to give users a path to install an alternative OS on their device. All Google phones allow installation of alternative OSes (and are pretty much the only phones that allow resigning the boot loader so they're still secure - which is why they're chosen by projects like GrapheneOS). Why do you think they need to be forced into anything? You can buy a Pixel right now and r…

I think the biggest problem is in the alternative OS. Non-official OSes typically are unstable that I personally find not worth the time given phone is quite important piece of communication. As others have already mentioned, certain lines and brands, such as One Plus, Google Pixels, etc have unlockable bootloader so people are free to install custom OSes.

I've been installing alternative ROMs on my android phones for almost 15 years. Never did I have any stability issues, on the contrary: the community ROMs often did a much better job than the official ones in terms of battery management, etc.

Re: No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability

#189

Post by 999900000999 »

I don't know what OP expects from such an old device. Apple goes above and beyond other manufacturers in terms of support.

The phone is almost 10 years old, the only thing Apple should do is send out a push notification warning users their device is no longer supported.

Re: No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability

#190

Post by windexh8er »

signal11 wrote: post #171
FirmwareBurner wrote: post #161

Earlier quoted context omitted.

>Buying an iPhone and keeping it for 6 years is a great strategy and when amortising the cost of the phone over those 6 years, it's price competitive with Android. What's stopping you from keeping your Android 6 years making it an event better value? Most people I know don't throw away their Androids after 3 years but keep them as long as iPhones. Basically until it breaks/dies. So far I don't know anyone who got hac…

> So far I don't know anyone who got hacked and suffered damages for using an Android that stopped getting updates. That’s a “hope for the best” approach to security, for me it’d be irresponsible to recommend it to even friends and family. But if you want to do it with knowledge of the potential problems — go for it. It’s your phone and your data.

Not when you can load an OS like Calyx [0], GrapheneOS [1] or LineageOS [2]. In this context the iPhone ends up the true "hope for the best" option. The original Pixel / Pixel XL (2016.10.04) can still run the latest LineageOS with current patches [3].

[0] https://www.lineageos.org/ [1] https://grapheneos.org/ [2] https://calyxos.org/ [3] https://download.lineageos.org/devices/sailfish/changes

Post reply on HN