5 ms·
iMessage is not being attacked because it's not as sandboxed as other apps. It's being attacked because it's accessible with zero clicks. For an attack like th
by tbodt 6y ago
iMessage is not being attacked because it's not as sandboxed as other apps. It's being attacked because it's accessible with zero clicks.
For an attack like this you need to chain an iMessage exploit with an LPE, and the LPE can be launched from any other app.
- ronnier 6y agoLPE. What is an LPE?
- pertymcpert 6y agoNot sure, but it might mean Local Privilege Escalation. It’s one thing to take control of the iMessage process, it’s another to then gain kernel level access.
- saagarjha 6y agoYes, it means local privilege escalation.
- saagarjha 6y agoIn this case it might not be necessary to escalate privileges, as iMessage itself may have been the target.