3 ms·
The lack of persistence could be worked around by a small enough device disguised as a phone charger. A sufficiently motivated actor could use a human asset to
by phs318u 7y ago
The lack of persistence could be worked around by a small enough device disguised as a phone charger. A sufficiently motivated actor could use a human asset to plant/replace such chargers at a target’s home/work.
- jackcodes 7y agoIt’d surprise me if you couldn’t embed the necessary hardware required to run this inside a USB cable.
- mtthwd 7y agoThe exploit requires the device to be put into DFU mode first and can’t be triggered by connecting a cable alone. From the article: You have to have a cable connected to your device and put your device into DFU mode, and that requires you to hold buttons for a couple seconds in a correct way
- jsjohnst 7y agoThe exploit doesn’t work just by powering on with a hacked USB device, you have to boot in DFU mode, which requires holding a specific combination of buttons as it’s powered on. The article covers this.
- matwood 7y agoYou have to put the phone into DFU mode. Yes, this is a serious flaw, but in the last 24h the overreactions have already become the stuff of legends.