3 ms·
I guess our only hope here, then, is that at least some of those who gets ahold of the exploit accidentally triggers a crash report and autosubmits it to apple
by 0x0 11y ago
I guess our only hope here, then, is that at least some of those who gets ahold of the exploit accidentally triggers a crash report and autosubmits it to apple so they can fix the bugs...
- Sanddancer 11y agoThat, or the other team releases their findings now that they're not gonna get the million dollars.
- armitron 11y agoObviously the logical assumption to make here is that this isn't the only exploitable bug for this version of iOS. Many many more exist and are already in the hands of various nation state actors, possibly even common criminals. Look at the capabilities Snowden revealed, some of them read like SciFi and NSA had them close to a decade ago. Do you seriously believe the NSA and any other similarly well-funded actor _does not_ have multiple remote exploits for iOS and if they just fix this one, everything will be alright? There are other actors, not quite top-of-the-pyramid-NSA level, that would gladly pay a million $ for this though, and this is where zerodium is selling. Your only hope is to assume that everything can be compromised and if you have reason to fear said compromise (some would say do it even if you don't), come up with a plan that takes that into account (risk analysis, compartmentalization, segmentation, assumption of compromise).