4 ms·

I'm talking about security fixes to non-newest versions of iOS. Apple just does not do them.

by badpun 8y ago

scarface74 8y ago
To nitpick actually they have. IOS 6.1.2 came out 6 months after iOS 7 But what unpatched security flaws have been reported in older versions of iOS that would allow an attacker to install a keylogger or otherwise exfiltrate user data?
- badpun 8y ago
  > But what unpatched security flaws have been reported in older versions of iOS that would allow an attacker to install a keylogger or otherwise exfiltrate user data? I don't follow the field of iOS security. I only know that, like everyone whose computing devices handle sensitive data and/or money, I want my system to be patched ASAP if a vulnerability is detected. AFAIK, Apple makes no such guarantees.
  - scarface74 8y ago
    The alternative is Android that has a much weaker security model and where the manufacturers don’t offer patches for more than two years if at all. But as far as iOS, I am not aware of any unpatched security vulnerabilities that have been reported in over ten years that would allow an app to exfiltrate sensitive data from another app on a none jailbroken device.
- saagarjha 8y ago
  > But what unpatched security flaws have been reported in older versions of iOS that would allow an attacker to install a keylogger or otherwise exfiltrate user data? …a jailbreak?
  - scarface74 8y ago
    I haven’t been able to find an untethered Jailbreak for iOS 5 - ie a method for an unsuspecting user to have his iOS device compromised. A “tethered jailbreak” means the user purposefully went through a series of steps to jailbreak thier device or someone else physically got access to thier device.
    - saagarjha 8y ago
      I don't quite understand what you're trying to say here. The difference between an "untethered" and a "tethered" jailbreak is that an untethered one sticks around after you reboot your phone. So how exactly is this relevant here?
      - scarface74 8y ago
        An untethered jailbreak is one that doesn’t required you to be connected to your computer. (http://osxdaily.com/2010/11/24/tethered-jailbreak-vs-untethered-jailbreak/ http://osxdaily.com/2010/11/24/tethered-jailbreak-vs-untethe...). A tethered jailbreak requires you to be connected to a computer. The difference is that an untethered jailbreak takes advantage of a security flaw in the OS that could be theoretically embedded into a website that you visit and your phone could be jail broken without your knowledge. A tethered jailbreak means that you either intentionally took steps to bypass the security of the OS or someone who had access to your device did.

I'm talking about security fixes to non-newest versions of iOS. Apple just does not do them.

by badpun 8y ago

I'm talking about security fixes to non-newest versions of iOS. Apple just does not do them.

To nitpick actually they have. IOS 6.1.2 came out 6 months after iOS 7 But what unpatched security flaws have been reported in older versions of iOS that would allow an attacker to install a keylogger or otherwise exfiltrate user data?

badpun 8y ago
> But what unpatched security flaws have been reported in older versions of iOS that would allow an attacker to install a keylogger or otherwise exfiltrate user data? I don't follow the field of iOS security. I only know that, like everyone whose computing devices handle sensitive data and/or money, I want my system to be patched ASAP if a vulnerability is detected. AFAIK, Apple makes no such guarantees.
- scarface74 8y ago
  The alternative is Android that has a much weaker security model and where the manufacturers don’t offer patches for more than two years if at all. But as far as iOS, I am not aware of any unpatched security vulnerabilities that have been reported in over ten years that would allow an app to exfiltrate sensitive data from another app on a none jailbroken device.
saagarjha 8y ago
> But what unpatched security flaws have been reported in older versions of iOS that would allow an attacker to install a keylogger or otherwise exfiltrate user data? …a jailbreak?
- scarface74 8y ago
  I haven’t been able to find an untethered Jailbreak for iOS 5 - ie a method for an unsuspecting user to have his iOS device compromised. A “tethered jailbreak” means the user purposefully went through a series of steps to jailbreak thier device or someone else physically got access to thier device.
  - saagarjha 8y ago
    I don't quite understand what you're trying to say here. The difference between an "untethered" and a "tethered" jailbreak is that an untethered one sticks around after you reboot your phone. So how exactly is this relevant here?
    - scarface74 8y ago
      An untethered jailbreak is one that doesn’t required you to be connected to your computer. (http://osxdaily.com/2010/11/24/tethered-jailbreak-vs-untethered-jailbreak/ http://osxdaily.com/2010/11/24/tethered-jailbreak-vs-untethe...). A tethered jailbreak requires you to be connected to a computer. The difference is that an untethered jailbreak takes advantage of a security flaw in the OS that could be theoretically embedded into a website that you visit and your phone could be jail broken without your knowledge. A tethered jailbreak means that you either intentionally took steps to bypass the security of the OS or someone who had access to your device did.