3 ms·
The second paragraph of the article covers this: > I wanted to find the vulnerability used in unc0ver and report it to Apple quickly in order to demonstrate th
by ehsankia 6y ago
The second paragraph of the article covers this:
> I wanted to find the vulnerability used in unc0ver and report it to Apple quickly in order to demonstrate that obfuscating an exploit does little to prevent the bug from winding up in the hands of bad actors.
- stefan_ 6y agoMaybe this should read "that obfuscating an exploit does little to prevent the bug from winding up in the hands of a talented full time security researcher". Of course if he was this talented, surely he would routinely diff new kernel versions and realize the old bug had been reintroduced before having to rediscover it in a jailbreak?
- ueouieodue 6y agoI'd make sure I had a solid foundational basis before calling anyone on the PZ team untalented ;) He abused the jailbreak to cause a crash. A talented researcher would try that before diffing kernel binaries.
- ehsankia 6y ago> talented full time security researcher If a single security researcher can de-obfuscate it in under a day, then a nation state with huge funding can too. Maybe not in a day, but eventually.