4 ms·
I don't think the bar is just nation-states. The bar also includes those with any of the following: - $1M Cash - skilled working knowledge of Apple's softwar
by toufka 10y ago
I don't think the bar is just nation-states. The bar also includes those with any of the following:
- $1M Cash
- skilled working knowledge of Apple's software and hardware
- fast reflexes to quickly react and apply a newly-public exploit derived from any of the above
Together, the number of world-wide actors who fall into one of those categories is actually fairly large. Those all have the capability to have total 'access' to my device. Given the value (to me) and the amount of data on that device, that's a huge hole, even for the majority of people. Further, with these networked exploits, the distinction between having one individual targeted, and all individuals running that OS is actually fairly slight. It wouldn't take that much more work to spam a well-designed exploit against an entire class of (normal) users.
- afarrell 10y agoThey also require a few other things: - a single person or committee with the authority to sign off on $1 million for this sort of thing. - a willingness to risk the legal and PR consequences of being discovered. Which cuts out a lot of potential corporate espionage
- vfclists 10y agoThis presumes that the exploits can only be found by companies with deep pockets, which are probably deep only because they are willing to sell them. What if there are equally good teams who are not in it for the money?
- afarrell 10y agoWhy would a corporation maintain an espionage team for any other reason?
- cpach 10y agoI don’t know about you, but there are probably zero persons who would pay $1000000 to gain access to the contents of my phone.