Live data from Hacker News

No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability

joshua.hu

191–200 of 242 posts

Re: No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability

#191
It's worrying to me since it's often kids who get the hand-me-down phones. I don't think they are going to know how vulnerable their data is. Surely Apple could at least let a community compile latest security updates, if they don't wanna invest their many riches in it? People often can't afford newer phones, and their data is vulnerable.

Re: No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability

#192

I don't know what OP expects from such an old device. Apple goes above and beyond other manufacturers in terms of support. The phone is almost 10 years old, the only thing Apple should do is send out a push notification warning users their device is no longer supported.

My laptop is older than that and I have no problem getting updates. Turns out tightly coupling hardware and software for general computing devices is not such a great idea for users or the environment.

Re: No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability

#193
post #183
post #129

Earlier quoted context omitted.

As someone that went from 5S to 2016 SE to 2020 SE which is my current phone, I've been very satisfied with the 2020 SE. With each phone I have always taken steps to reduce battery usage, disabled background refresh, and manually turn on low power mode after charging every single time.

Is your hand large enough to handle the phone one-handed and touch anywhere on the screen with ease without risking a drop? If not, do you use some kind of magnet finger-ring case or similar case?

I have my iPhones set to bring the top of the screen to the middle when I double tap on the Apple logo on the back.

It’s a feature called Reachability.

https://support.apple.com/guide/iphone/use-reachability-iph1...

Re: No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability

#194
post #180

Earlier quoted context omitted.

According to the link Xs is supported.

The parent comment says this - anything _older_ than XR or XS is no longer supported

> Any model more than 5 years old (Xr and Xs) are essentially not being updated and not secure. So an iPhone 1, 3, 5, 6, 7, 8 and X are all not secure and most people who use the iPhone are totally aware of this.

That reads very much like X's are not supported. The 2nd sentence even says it explicitly.

Re: No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability

#195

I don't know what OP expects from such an old device. Apple goes above and beyond other manufacturers in terms of support. The phone is almost 10 years old, the only thing Apple should do is send out a push notification warning users their device is no longer supported.

My laptop is older than that and I have no problem getting updates. Turns out tightly coupling hardware and software for general computing devices is not such a great idea for users or the environment.

Microsoft straight up disallows Windows 11 installation on plenty of PCs that could easily run it.

Sure you can argue that it's "easy" to install Linux on it, but that's out of scope for the typical user.

Re: No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability

#196
post #194

Earlier quoted context omitted.

The parent comment says this - anything _older_ than XR or XS is no longer supported

> Any model more than 5 years old (Xr and Xs) are essentially not being updated and not secure. So an iPhone 1, 3, 5, 6, 7, 8 and X are all not secure and most people who use the iPhone are totally aware of this. That reads very much like X's are not supported. The 2nd sentence even says it explicitly.

That was about the literal iPhone X (the letter X). The iPhone Xr and Xs (roman numeral 10) are still supported.

Re: No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability

#197

Earlier quoted context omitted.

It’s absolutely economical. Apple only has to support a tiny number of devices that they themselves manufactured, they have the easiest job in the world. Think about how many devices Microsoft has to support in Windows, it’s orders of magnitude more. Apple doesn’t want to support older devices because they don’t see a benefit to themselves. 5 years of support is pitifully short. Pretty much everything I own lasts lon…

[flagged]

Is it really bullshit? Lenovo manages hundreds of laptop models via fwupd, and those work just fine after they lose OEM support. I've got a Thinkpad from 2009 that still gets modern Linux patches (to say nothing of my 2006 PowerBook running Arch/Plasma 5).

Compared to what Apple makes off hardware and service revenue, the cost of opening iBoot and providing basic firmware support would be almost nothing. It's so economical that the volunteers at Asahi were capable of replacing the missing bits via black-box reverse engineering. You want to tell me that Apple is incapable of releasing that firmware themselves? On a technical forum?

Re: No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability

#198

I feel this is misleading as most iPhone users are totally aware that iPhone Models not running iOS 17 are not being actively updated. The list is widely published: https://support.apple.com/guide/iphone/models-compatible-wit... Any model more than 5 years old (Xr and Xs) are essentially not being updated and not secure. So an iPhone 1, 3, 5, 6, 7, 8 and X are all not secure and most people who use the iPhone are tot…

I have been a developer and nerd since 25 years, and I always expected that Apple also patches some previous versions. E.g. around a week ago they released both iOS 17.2.1 and iOS 16.7.4: https://support.apple.com/en-us/HT201222

So why should I assume that latest iOS 16 isn't completely patched? I think it's a shame to say at least that Apple has no public policy of how which OS versions are supported and which are not, it's just guesswork. Whereas I definitely know how long Microsoft supports Windows versions, e.g. Windows 10 until October 14th, 2025: https://learn.microsoft.com/en-us/lifecycle/products/windows...

Re: No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability

#199

I feel this is misleading as most iPhone users are totally aware that iPhone Models not running iOS 17 are not being actively updated. The list is widely published: https://support.apple.com/guide/iphone/models-compatible-wit... Any model more than 5 years old (Xr and Xs) are essentially not being updated and not secure. So an iPhone 1, 3, 5, 6, 7, 8 and X are all not secure and most people who use the iPhone are tot…

I’m pretty sure most iPhone users are unaware of which version of iOS they run.

Exactly my thought as well

Re: No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability

#200

Earlier quoted context omitted.

Shrug. That's their problem. Or it should be, at least. Don't sell crap you can't support for a decent amount of time. Stop ruining this planet we live on by creating immense amounts of e-waste every few years. We both know your argument is dishonest or at least naive, though. They could easily support updates if they want to. But it's about money. This way they are forcing people to buy a new phone every few years.…

> dishonest Dishonest? You're saying I'm lying to support a trillion dollar corporation I have no financial stake in and never have? Is such an accusation really in the spirit of this forum? I suggest you review the guidelines - https://news.ycombinator.com/newsguidelines.html Don't be snarky. Don't sneer. Assume good faith.

I will say that certain comparisons (eg. "The PC way doesn’t work at scale") are objectively wrong. Even Apple uses the PC model internally, despite not having an open bootloader or really supporting UEFI anymore. AFAIK, the XNU kernel even uses the same DeviceTree layout as Linux for supporting ARM SOCs. Apple hasn't really broken any new ground that can't be re-covered by modern operating systems.

Also, your claim that it's "not economical" is entirely unproven and arguably false. iPhones are still architecturally supported by Linux and will continue to be for a while (even longer on BSD). Other Apple products (eg. Apple Silicon) received community driver support entirely from donations and volunteer time. There's no reason to assume that iPhones lack community interest, especially since Apple has never given the iPhone community the same leverage they had on Mac.

If that's the sum of both arguments, then you're mostly just leveraging FOMO to support an unproven concept. At best you're jumping the gun, at worst you're twisting the facts to preclude discussion of open iPhone software alternatives.

Post reply on HN