3 ms·
I've read that three times and I still can't parse it. Why would being on the latest version make a zero day worm more likely?
by spzb 6y ago
I've read that three times and I still can't parse it. Why would being on the latest version make a zero day worm more likely?
- dewey 6y agoI've read it as a way of saying that the fragmentation of iOS versions is way lower than on Android. So if a "latest iOS"-only zero day would've been found it would affect a lot of users as they tend to update quickly.
- bsdetector 6y agoComplicated to exploit bugs often rely on specific code and data being in particular places or even the number of cycles a code block takes so even if the same bug had existed for years you might have to write a separate exploit for each version. And make a version check if failed attempt will crash the software or you only get one attempt. Sometimes the hardest part is finding out what version of exploit to use and that may even have to be done manually.
- mensetmanusman 6y agoSorry for the confusion, it seems that in a software monoculture, where everyone has the same iOS version, a zero-day (which in theory will almost certainly always exist in complex system) would travel more effectively than in a system with lots of OS versions. E.g. a zero-click zero-day exploit that spreads through a zero-click iMessage message could travel the world in a few seconds.