Live data from Hacker News

Everything has changed in iOS 14, but Jailbreak is eternal [pdf]

i.blackhat.com

51–60 of 65 posts

Re: Everything has changed in iOS 14, but Jailbreak is eternal [pdf]

#51
post #38

The fact that Apple clearly cares a lot about software security from at least two angles--both securing the device for the user from external attackers (I know they truly care about this, even though they frankly seem to focus only on users in the west and have been known to throw people from the east under the bus without a fight: see their attempt to downplay Google Project Zero's critical discoveries a few years a…

Splitting your thoughts using sentences and paragraphs are powerful techniques that I think you would benefit from learning.

Re: Everything has changed in iOS 14, but Jailbreak is eternal [pdf]

#52
post #47
post #38

The fact that Apple clearly cares a lot about software security from at least two angles--both securing the device for the user from external attackers (I know they truly care about this, even though they frankly seem to focus only on users in the west and have been known to throw people from the east under the bus without a fight: see their attempt to downplay Google Project Zero's critical discoveries a few years a…

Hello fellow poster! Line breaks would be lovely for comprehension's sake.

That would probably involve breaking it into multiple sentences, and I just really didn't want to today :/. I have been having to explain the same thing over and over again now for over a decade, and you just have to have fun with it sometimes, you know? I highly recommend reading this one out loud, beginning to end: I carefully optimized the cadence of it over the course of numerous read-throughs, and I am quite proud of the result. If you want a more readable version of the same thought, I probably said the same thing in a different format somewhere every single day for the past few thousand days (and it doesn't seem to matter, lol).

Re: Everything has changed in iOS 14, but Jailbreak is eternal [pdf]

#53
post #51
post #38

The fact that Apple clearly cares a lot about software security from at least two angles--both securing the device for the user from external attackers (I know they truly care about this, even though they frankly seem to focus only on users in the west and have been known to throw people from the east under the bus without a fight: see their attempt to downplay Google Project Zero's critical discoveries a few years a…

Splitting your thoughts using sentences and paragraphs are powerful techniques that I think you would benefit from learning.

FWIW, reading the other responses first to make sure you aren't leaving duplicate commentary is a powerful technique that I think you would benefit from learning ;P.

Re: Everything has changed in iOS 14, but Jailbreak is eternal [pdf]

#54
post #46

Here’s a thing about jailbreaking. As a user I like my device being safe from outside attackers (NSO & co). But I definitely do not want my device to be protected against me . It’s absurd that I have to use the methods of an attacker to gain modification privileges on a device I own.

That's why Apple needs to unclench and give up its need for absolute control and just allow bootloader unlocking. Users who modify will always want to be able to modify and the only way to have that and have security as well is to allow specific ways for it to be done... not to force modders to rely on exploits.

Unfortunately, it's now vital to child safety that iPhone users never be allowed to jailbreak their phones. Apple's recently-announced CSAM photo detection feature relies on Apple being sure that the real NeuralHash machine-learning model, not a fake that produces random data indistinguishable from a non-matching photo, is running on everyone's devices.

So I'd say the odds of them loosening their grip here are pretty slim.

Re: Everything has changed in iOS 14, but Jailbreak is eternal [pdf]

#55
post #44

Earlier quoted context omitted.

I’m all ignorance on this subject - what would making scanning illegal prevent?

Other way around. If you root your phone and disable its ability to spy on you then that’s obviously against the desired effect. The whole point of the hash scanning is that, you, the user, cannot disable it. Meaning there would probably be laws to force us not to tamper with that functionality. Similar to how printer manufacturers have to look for “the yellow dots” on bank notes and refuse to print/scan.

I imagine there will be a class action suit to get it disabled on the basis that it costs me money (even if a small amount, it adds up), with no way to turn it off and it literally can do nothing good for you. In the worst case it puts you in jail for something you didn’t do and in the best case, it costs you money.

Re: Everything has changed in iOS 14, but Jailbreak is eternal [pdf]

#56
post #36

Earlier quoted context omitted.

I got that part. The part I don't understand is this: what does it mean for a program to be proven correct but still not work?

It means that the correctness properties that were formally proved are not necessarily what you would intuitively understand as "correct". E.g. you can formally prove that a buggy factorial(n) always outputs (n - 1)! by incorrectly defining what you want to prove. The function behaves according to what you proved, it's just not the expected behaviour.

More pointily: "correct" is not a formal property of a program, so you can't actually prove it in the first place. Rather you have proved some actual formal properties of the program (eg, always terminates, does not branch dependent on cryptographic secret data, etc[0]), which may, or may not, have any relevance to it's actual intended behviour.

0: Strictly speaking, even those are only English-language descriptions of formal properties, and you still need to worry about whether the formalization actually means what you think it means.

Re: Everything has changed in iOS 14, but Jailbreak is eternal [pdf]

#57

Earlier quoted context omitted.

It’s about evading the forbidden images scanning, which becomes possible when you can modify the software you’re running.

If scanning works on filesystem-level, just storing images in any non-standard format would be enough, you don't need root for that. Most likely even storing images in an sqlite would make them inaccessible for those scanners. Trying to force all apps in the world to use some scanning API for their images is unrealistic. Also you can use web apps with some website hosted in a free country with canvas drawing. They'll…

> targeting most popular apps and services

If a competing photo storage site doesn't offer the same "feature" of scanning the files you upload, might Apple decide to prevent iOS devices from accessing it? I'm sure Apple would love to claim that the anti-trust authorities don't care about the children.

Re: Everything has changed in iOS 14, but Jailbreak is eternal [pdf]

#58
post #34

Earlier quoted context omitted.

It's a comment from a correspondence between Donald E. Knuth and Peter van Emde Boas (meant as a joke I think). You can find it in this pdf at the end of the 7th page : https://staff.fnwi.uva.nl/p.vanemdeboas/knuthnote.pdf Knuth mentions it in his FAQ (at the end) : https://www-cs-faculty.stanford.edu/~knuth/faq.html

I got that part. The part I don't understand is this: what does it mean for a program to be proven correct but still not work?

To the other comments here I have to add - proofs (in math, science, computer science, any subject area..) never reflect absolute reality, but rather just your view of reality or the parts of reality that you have chosen to model.

So the reality of your "proven" program will never 100% match the reality of it running on hardware or some other software context than you anticipated. Let's call this the Hacker's Postulate...

As for math specifically I think this is a very deep and interesting philosophical tangent to go down.

Re: Everything has changed in iOS 14, but Jailbreak is eternal [pdf]

#59
post #46

Earlier quoted context omitted.

That's why Apple needs to unclench and give up its need for absolute control and just allow bootloader unlocking. Users who modify will always want to be able to modify and the only way to have that and have security as well is to allow specific ways for it to be done... not to force modders to rely on exploits.

Unfortunately, it's now vital to child safety that iPhone users never be allowed to jailbreak their phones. Apple's recently-announced CSAM photo detection feature relies on Apple being sure that the real NeuralHash machine-learning model, not a fake that produces random data indistinguishable from a non-matching photo, is running on everyone's devices. So I'd say the odds of them loosening their grip here are pretty…

Details on that technology https://www.apple.com/child-safety/pdf/CSAM_Detection_Techni...

Re: Everything has changed in iOS 14, but Jailbreak is eternal [pdf]

#60
post #46

Earlier quoted context omitted.

That's why Apple needs to unclench and give up its need for absolute control and just allow bootloader unlocking. Users who modify will always want to be able to modify and the only way to have that and have security as well is to allow specific ways for it to be done... not to force modders to rely on exploits.

Unfortunately, it's now vital to child safety that iPhone users never be allowed to jailbreak their phones. Apple's recently-announced CSAM photo detection feature relies on Apple being sure that the real NeuralHash machine-learning model, not a fake that produces random data indistinguishable from a non-matching photo, is running on everyone's devices. So I'd say the odds of them loosening their grip here are pretty…

The EU is pretty resistant to Apple bullcrap. They will order Apple to switch to server-side scanning on unlocked devices.
Post reply on HN