Technology

62012 readers

5020 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each other!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed
Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago

MODERATORS

[email protected]

BLASTPASS: NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in the Wild (citizenlab.ca)

submitted 1 year ago by [email protected] to c/[email protected]

11 comments fedilink hide all child comments

We refer to the exploit chain as BLASTPASS. The exploit chain was capable of compromising iPhones running the latest version of iOS (16.6) without any interaction from the victim.

top 11 comments

sorted by: hot top controversial new old

[–] [email protected] 6 points 1 year ago (1 children)

The fine folks at CitizenLab are doing such important work. I just want to call out what a net-benefit they are for us all. I can't count how many times I see or hear their name in sec updates, sec podcasts, news stories, etc. Thank you to CitizenLab!

[–] [email protected] 2 points 1 year ago

I hear only good stuff from them. I think they were featured in the last episode of darkness diaries too.

[–] [email protected] 1 points 1 year ago (1 children)

Must be what the 16.6.1 update was for last night

[–] [email protected] 1 points 1 year ago

Yes. The linked article points to Apple’s release notes.

CVE-2023-41064: The Citizen Lab at The University of Torontoʼs Munk School

[+] [email protected] -9 points 1 year ago (2 children)

"iPhones don't have malware"

[–] [email protected] 12 points 1 year ago (2 children)

Who claims that anymore? Ever since covid there's been tons of zero days updates. The only security benefit is not having extremely delayed updates like most android devices.

[–] [email protected] 1 points 1 year ago (1 children)

Which is why I roll pixel and before that nexus.

[–] [email protected] 3 points 1 year ago (1 children)

Yeah I'm an iphone person because I have no interest in side loading or any of that stuff, I just want it to work. I use it with medical devices and because of the fragmentation of android the medical device makers need to test and get approval for each phone model whereas on iOS because everything is the same OS its usually the first to get an app except for my newer insulin pump because they went with a managed android device as their included controller.

If I were to go android I wouldn't touch anything non google, especially after an article a few years ago I read that mentioned some OEM customizations actually adding vulnerabilities.

[–] [email protected] 2 points 1 year ago

I haven't side loaded anything in years. In decades past I played around with custom roms and at some point I may look into the pixel roms for my older phones.

Aside from the usual issues that popup with any os for any device, I've had very few problems and none that stopped me from using my device.

I refuse to touch apple with someone's else pole. I like being able to install apps that aren't from the store and I can do that without having to hack my phone.

I equate apple to AOL. When you are new to tech apple just works but when you learn that there is more out there than apples walled garden you look at android that let's you do so much more and has so much more choice for hardware. Not to mention cost.

[–] [email protected] 0 points 1 year ago

Lots of people think iphones are secure.

[–] [email protected] 6 points 1 year ago

I think you dropped your straw man