3 ms·
iOS is such a walled garden that security researchers have a very difficult time gaining low level access on the phone. This has incentivized researchers to kee
by arkadiyt 7y ago
iOS is such a walled garden that security researchers have a very difficult time gaining low level access on the phone. This has incentivized researchers to keep vulnerabilities they find for themselves rather than disclose them to Apple, so that they can use the vulnerabilities to gain the low level access needed for additional exploration. The Checkm8 author posits that by providing people this access via his exploit, researchers will submit their known vulnerabilities to Apple and make iOS safer.
- erichurkman 7y agoComing next year: pre-rooted devices specifically for security research, though likely with well established groups. https://thenextweb.com/apple/2019/08/08/apple-announces-developer-iphones-with-root-access-for-security-research/ https://thenextweb.com/apple/2019/08/08/apple-announces-deve...
- vuln 7y agoSurely you mean nation state actors.
- Thorrez 7y agoWhy do you believe that? Apple made quite a lot of news by refusing to unlock the iPhone 5C from the San Bernardino shooting. Helping nation state actors find vulnerabilities would be contrary to their previous actions.
- sambe 7y agoNot really. Helping nation state (any) actors gain access to user data would be contrary to their previous actions. Helping experts research vulnerabilities is a calculated risk that the good guys will reveal bugs at a similar rate or faster than the bad guys, whilst also disincentivising the hoarding.
- Thorrez 7y agoI don't understand. vuln seemed to be suggesting Apple would give pre-jailbroken devices to governments to find vulnerabilities with instead of giving them to established white hat researchers. I don't see how that would help good guys reveal bugs.