6 ms·

Dupe: https://news.ycombinator.com/item?id=25489140 https://news.ycombinator.com/item?id=25489140

• mulmen 6y ago
  This is a dupe but seems to go into more technical detail. There’s no mention of iMessage in The Guardian’s coverage.
  • keyle 6y ago
    It's all sensational articles though. Show me the bug they used to exploit iMessage. That'd be far more interesting that this Cold War madness we read everyday.
    • vorticalbox 6y ago
      They may be under NDA from apple as the ios 11 is still widly used (I think)
      • kennywinker 6y ago
        I think you misread. The exploit effects all ios’ before ios 14, not just ios 11
        • scoot 6y ago
          "In July 2020, KISMET was a zero-day against at least iOS 13.5.1 and could hack Apple’s then-latest iPhone 11."
          • kennywinker 6y ago
            Since this is a software exploit, not a hardware one, the model of phone hardly seems relevant. An iPhone 11 running iOS 14 should not be vulnerable to this. However an iPhone 8 running iOS 13.5.1 is presumably vulnerable. I suspect the parent post conflated iOS 11 (software) with iPhone 11 (hardware).
            • scoot 6y ago
              That was my guess too, but I simply posted the claim from the article, since neither the parent (ironically) nor the GP appeared to have read it correctly.
    • shakna 6y ago
      Whilst some details of the attack are still under wraps as Apple is still working on a fix, there is a considerable amount of detail under "The Attacks" [0]. The initial vector appears to exploit imagent, to cause the download and install Pegasus, in most cases. This is likely because imagent runs under the root user. [0] https://citizenlab.ca/2020/12/the-great-ipwn-journalists-hacked-with-suspected-nso-group-imessage-zero-click-exploit/#the-attacks https://citizenlab.ca/2020/12/the-great-ipwn-journalists-hac...